last executing test programs: 24.37207128s ago: executing program 0 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f0000000100)) r4 = dup(r3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8919, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x56}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x20, 0x7, 0x2, 0x2, {{0x1f, 0x4, 0x3, 0x3a, 0x7c, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @timestamp_prespec={0x44, 0x24, 0xde, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x506d}, {@remote, 0x9}, {@private=0xa010102, 0x9}, {@loopback, 0x7}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0x1, [{0x6, 0xb, "551eaaa5418176b31e"}, {0x7, 0xe, "dbce8d58fa81a82c3ce905e8"}, {0x7, 0xd, "dc34a575d042f29ab6cd28"}, {0x1, 0x3, "7f"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x5, [{@remote, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x3, 0xff, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x66, 0x0, 0x7, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x30}, {[@lsrr={0x83, 0xf, 0x89, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x79}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'macsec0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) ioctl$SNAPSHOT_FREE(r5, 0x3305) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, 0x0, 0x20000800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10) 24.099959916s ago: executing program 0 (id=331): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x63, &(0x7f0000001300)=[@in6={0xa, 0x4e23, 0x7fff, @local, 0x1}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e22, 0x9, @local, 0xb}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe5}]}, &(0x7f0000000080)=0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xa0, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x40880) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x17fc, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x138, 0x3, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "424131c429a4be627567bbae8abf1d0ffa8d5113dc1ac4fba2c83e599a743f9716d5d4088cafd2a0878899f274d5e7e371"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9ec, 0x3, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}, {0x890, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "4146fc3d5915cfd0709e39ac3979b055667183f9ab24022ed911a0e08f32fe34078d12513e13"}]}, @NFTA_SET_ELEM_KEY_END={0x360, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "eeca49ed945d70381035a03e38e3b16259bc7070760fcd31598a0d19d2ca5a3a269ae0b32dc14178d83f7a637404451de5ea1b230a51d13ef9bc836151bacbf72d5b74c7eb47c5da08"}, @NFTA_DATA_VALUE={0x6c, 0x1, "fa74e4a74c9120231767fbda137ad334c126de5aeb4acf914ff9482074c6822ca27c15396912c0bd831b2d4cd1a40ce2726bf27e5066cd2be250a3e58d0a6c0a5cb179bf95f3bcf717c4ce96f9488f2de2c21e735f1b860bca6aaae84b1076573a17d7036989a85e"}, @NFTA_DATA_VALUE={0x2e, 0x1, "4993b92d5300e15e3eddb849591ef5cfc04a7aa4423cae30fd543f7c57ed3cde1c65527c41f2aab62d37"}, @NFTA_DATA_VALUE={0x70, 0x1, "3b8cbc1393c44006a168fc31b79d4913c32668388cda5b7cc21926977303dfca5ab2ce17cf597b63448cfce1d9198639436f8dbad0f08e4a186edaf69234da0f5f353542818f247d6838af04c3bd3a55fbe43079924a2dbb356280bd2a2ca655fd7148800e695755989c3385"}, @NFTA_DATA_VALUE={0xcb, 0x1, "3406439431c143dc58c99d098188a8b99857c657b678219c99138d0d2fe1719ea036414e11baac82b26373e21dd249c607374349ce46d04c3cf861b39b602837f6acd313961539630a883239c8383bf2265be328e6717a7c88bacd4200260ba07c0cd09ffc26906ecc330dd2784f7ce4514b0ee5d07bcc371e2a709a64f10c1a5f4a74b3dae8dc37ceefd1bd5ebfd8c78a54aa1b034b97bc690ff1a75c5bbe799fe95af5b7ebf1a2073512d6de973cafbdedf95e077511e28b384163bab2813aaa87f4aa76feec"}, @NFTA_DATA_VALUE={0xc9, 0x1, "ab8de870a9a95df9802d477cba5c526641f86176f82d4ed2f571f0a492c0a211609aa4e21fec3e177a8e855a3584ec302187475f12cafbfdb4c6d1ac682550a27a93e520f077b30b418e7435e2d7b6db4be2e3df3238798577b99974d88df08133268e838a526559628bea7b6fe6d434d89e41f463ab0a34160cab54ba85e12765c823abda541fa4b73851ca056245b49c6dfc1805b6cf72b503c976d0da42098352ae1d92463ab1bce3138afa7fdf778431ee5044c95e4c9ea7ae87c10ffda5d1fc69ccd9"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xaa}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x388, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa4c35c88a9c92647}]}}}, {0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x60, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0xff}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}]}}}, {0x1dc, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1cc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0xa4, 0x3, "eda01ee0fae97c2ed54e0442e013166ed0ad7cb106df1cf456f863c3732f056116e9ea0fcd17195a14e28c7d0c7d41ebf7be57897c71f49c7fbb283f955c4653a09e8bb7ab221b1fea9881fdaa9b330fcd9e9fabe3214ef6c4e4007d1b6d9ecffe7459461665a434320ea1f28445f0d6ce00bcccbc1eed5d31f21637c57edd52d9e3444b12160e39cb475817cd5acb494eda852b6c2c24c71b7ef3be9df80f53"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0xf8, 0x3, "54ecfab0141f402c92ccaeb178a9fa8bfdcab7269f5ea856b7c69657904deea1a27ac76f5cc973f21ee930b04034388d58e1e4022dc5756af45f3c4a09a57e37c43ab98048bb055dd1107550023f9cd29ec2afb1c73f9e2cca9b0f26f1b3cd6abf91575732c5eedf7389eb723ff818cc3d43627f7b7daff637607bb67290c24b9cc8a6ce22581198398c66be6c5cc10b4a435cff380432039a248c24a862354f5c46356aaba6bea2eaf1866eb73443fa190428f50d093546337cb7b375ace48b937dd3a32c63a80e713336cce96156deb28b460f96e8024394636d1333a46ba1f5b45798775f4247fcf02969f6320c669d62003d"}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "cc"}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_INFO={0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}, {0x60, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x47aeac7d}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xd02b}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xc7, 0x6, 0x1, 0x0, "e33a0a8200f3d4d63770f8db82ab538f1e6ca8801d00e429b24a16a81f0ef78cb0705b5879db447a8da92ccb0aa2fd8eae0998a3c2a9d8b9458d3db7adea672bd6b2591bff4f18061040b197de9dcd1df46e98acba69314f3f348c262fc0994f5d89dfe5d78a12bc44b6b710d6b55b3f4ce6f3f22675af2230571e88057992c274ed3da6e443288fb4dd5b116fa16af727feab3c4ff195648f1253a12885820bb742bd1ee348e428c2b447d259f54106491edc61735f9a9ae1580a1531ac842035ecba"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xca0, 0x3, 0x0, 0x1, [{0x2f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "de2e321aed94009a8a481fcee8149c767d14be7781bf88a71670d76b624ab389c3b607716bae972382d9bbb3c16b851f66a1ae207e513f88a19ac44fabe7aa18efaa69367bebaafa89295915d5aba57a4a94ee8dae9b9394662e08"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf7}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8d}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xfb}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "fcd3d5f0f93afa8aeb509fa8b356bce21b97bbf5e237456093070d5533adf8ae3ca283568b8fb05fd1e72cf6ef7cd4ce4e934550364a36d49d5afd4d504ecacae161fc0fbcf83187776b7ef6797acefbd4a5637233c6b4d1752b708ace342a608455ba30d6cf7304e716e66f25bd7d2c92892a6766f2ef3538c54ba1005e36ac9a1f995e26c34d58a31b4176b8c020e5fa4a141f6e2e271bc770386b9cfa367b69dc312a7e00a3d39a8044c72c03bbc52d080e8cb5d707c60a8c64210df97f7d2ea70ea2d2"}, @NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "c6d162e4522dcd47294a9c27413a8a10d521c27042d1f70ec93a8ce84de2e9669b85f33376129f4aa0df89167c5cef7c838486af4e9dc22e29fa540b33c5918b963e76549146865eb4af426cf599e7c32a8d1270a4861dda5c83e665dee44796f6ce724759234d9c4535f9e6dabc92267f19d6eaa3fa38c09acb39c48339ed91b37f56c9c99ae93e2ec3382e9701b22d333f94828d173d840e744bc4531a"}]}, {0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "37e68da6e307af634051cbf07fa2999be0f9ce9debb9a6262398f92b94f92d494ead10e3ba3cf3b58db025f5797954fc4a8dac"}]}, @NFTA_SET_ELEM_EXPR={0x80, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfe6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}]}}}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "d6f18e29ca68e6c97ea44f6a3e9e5efee37b2e274f19db62669d853c3cc247e5fdf241c4c1d5bcb6ce8e607f5f105ba51e552f7d3fcc67b8bb2f9bad529c9e8ae279294d237f36a96583f022af1a480d1fbc54d4decb6070227021b1d02aeca4c3acc58acf45cf25ec4876ffb1ccfeed69811d61433d04fcb38e1c95d1e09ea958d92b551456379da09d67f500395c9f7c1562e259e6ad7d84c1da857acf3484d31a00b11a74612de5cbd05db21ef7cc7ed5e31aceff9ad89fe3e980ec972237153a2a15d40c4574b9703c43d561a901f7d6f63653fa8e6130c25de9aa"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x17c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb33fee7de17aea18}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}]}, {0x30c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x16c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa, 0x1, "45361d6724ed"}, @NFTA_DATA_VALUE={0x8d, 0x1, "45766431cca9159f469fe803fc9795d67725bbb7bd5421ef4d578c2705329006297d213716e25c97f579df83800a8c0db6239d19e81316b7dcfce77ea46361a0721881742a85ae5d08c1f50810218e49c2e352aab61a63f5d9171654dbaf2ab66b637133f559dba56877e67def1165efb72393791d5393d5733d54367ba8526ea1f62ac8c9a2d7c31a"}]}, @NFTA_SET_ELEM_KEY={0x184, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "2abcde7e31de87ea380594ee0cf892bffa69f9f110b9ecee02d503a0121a69703642bd9558e019aa13990de73844de9762f9f922a82645b3b4e7ca1c5871039a60886d467e962aacfacaa82947ee2cba2af3e2038b"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "c4605996bb1b1ffbaba7a8c4ba6587222388f79daac09ac639b682498f31d7465667d74ce346ddf650ea7c"}, @NFTA_DATA_VALUE={0x93, 0x1, "d367331d362e3b8e5b3ffd37a67108616ee1f7f9edae4a5554583e0107a0bd13ce675643d0cc7f32a0e36852551053b22e44b64d35643974df09c03a8988dc85e108cb86271ed6de6ca93a2ebee9cee5832bca4078f429b4eb6322a342787981e78d831eddb455705ff782f5f622598c007e77b4c50ec564a7d92e2016afce1cc9be4621dc2ef7783f3abeee01f85b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x17c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_USERDATA={0x50, 0x6, 0x1, 0x0, "4db87ce551fd9a076583fa16a9473635d111e8b726cb8f614fc4aac6c89d52ab5c885de2a97b472f7038d94126af0da839636d4ca2b34975223bdd6892a7e44528c596c3ea9cf34142fd9f35"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "dbac66ee6318c1d06958e943bb9415e93b05a6e56f3a358eba6891b8d3224b6f589bad3e6bfea387bdac582bb46407c344cbe02dd5f7184a4a770dd6d1a64c0ff764f0aba91eea6bcc1fbfac0f2715bdd4ec51c03f30c2cdec"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x50, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "c0426b9261aea6c91fc2be8b289fe4a7c75fa4f1ca87a1689ede0831288fadcb5968ab4dbe24bf4c3a24e9516f22dc14aac890cdb8a03729db84b95150959aedb653f8dffcad5fcb"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELRULE={0xc8, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x17, 0x7, 0x1, 0x0, "4fbf0be1b6b19a2934b1fd02af3e2add9b2323"}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x903, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "dd3faf78867b385e5ba33c9611aad59e768f33e6311dc71884310616bfe34e23e08868399ac75ae3d3cb4d277f441fba4057b1f6b6961a9f4c93628fbb8c8c849dc0db9005ddabe16faa717265a17963c85af83fa0bdd9527cbdff1442b65b5a683ef7c11b721c345299c708cac0bf912b693150d7358cb676383fabbfca91b05db668686ea77d00bc471d1d50013427581e499a8d7ca47182383e095af4e3f938ff3d58469d1365ed4443192f1129fbb5ef16"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0xb3c5414f5fbfcdd9}]}, @NFT_MSG_DELOBJ={0x88, 0x14, 0xa, 0x205, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x4c, 0x8, "78165c39f5756e0971cc0dafda13158ac7cf1dc3b545d4f44687971df6f3e4da415eb7b058d4827e853801cbf93a40dcac3e75fb928dfce1079a4e8bbd2467ac8e632ef3d6460b4c"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x210, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0xd1, 0xc, "ce1acb68e893cab452251afdafc55fc10991848ad92646ec8ee2ce7316718b6f7ceba4b7aab1d52b2101a493fbd9f87fb45d13539cc81f8190b05a6e09e78eff852cef421b3514f3495effec97d90fc58a921017136e715196f06a8a2357e5bf0d5b3d35ecde9dbfa1946db264f60a37881d83e8216d037fcdb4e7ccb6c0bd89273aa38756d01cb7190e50b1721bd51a3d11d3557c94557d38574b1ca156c18354400f4f53068b0d79561773cfc2c7b2fe9a0b117f37e82c73641746472dc56e46b3d2325c7d5c625c399575ab"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xef, 0xc, "58e76bd927a3ffaa3d8543d94c997e9f8b9f2d329c491185ee1b414aad084d0b0c041bd094ca64ac546c20401765abe3ad6973d350c253fa1aee5e0a5823159d8519404550d42c743cb4725609f72388c0877175e1261be0994d35ba03dac63f5d7baed621249085fdc93ed0e1a51ecf08fe58d831a057a1072a788e372005f5deea2efa2f09688c70c726dedc04673b7f0a0d2d69ca25abce6b54d3987fccd2a62fbd651487072409699bc292a66fa9d284a9f0043e054babace11705173b9a9778a76ab46f4405b77791d12d95623183f7ff52133b70b15333b6d2343331b5f3d550f2aea15c05f1ea40"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x48, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x1b, 0x6, "e1d4ba31fc8c441f916409bde54b19025b25728f1cd19b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xe8ba}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1da4}, 0x1, 0x0, 0x0, 0x40}, 0x4) 23.608528435s ago: executing program 0 (id=339): r0 = gettid() (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0xc020500, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) (async) tkill(r2, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x441e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getsadinfo={0x270, 0x23, 0x400, 0x70bd25, 0x25dfdbff, 0x0, [@tfcpad={0x8}, @algo_comp={0x10e, 0x3, {{'deflate\x00'}, 0x630, "556b30fade64bdafaf2807439cd70b7f3c8cf098fc4d8ca4b99b19f65393e82478d365143581ba4fb657520e8c724619ac5250a6103ea002d8dc6fb5cf4ebc7e5990188496b0ad018352722435595dfc3a1b1a2db7ca89db9eb5574918901f095f5a01313600d12596f941d678b5a1a253f71150ed25c67a23b949006731503be667e30e729c6f12a3723dcc56b21e3a84f84542d65df7257ae7d97e35cf3ee3a353ccab878a15af39c20bba72c870de15437a9adf72e393bf7b59b22a6a407b350dfccb1fe6"}}, @algo_comp={0x13b, 0x3, {{'lzjh\x00'}, 0x798, "e5d423c88a8064867418cf69c271b93fa8d2064a54634fab6c519736446a4df71f44300807533ce6d5a2c34eb10b9a0ecf71a5bbb17684ebd7b1833d026add9abb376dfb9c5620619e18c424ef077451574581e664e49526c420f26f7921fd80cd9d29756080272c7f23d5369f8add43c99476c5069bc23e9e007eec9ded4f72a781d1d24b6ee70c3518ce8a9f2d7c65da0219371f2c2f1d8d014012b905ad5b24929b3b3944c50622a059ce8e0d4683b1bff8b02a5da3559427296ac7aa88695d6b7eadef99c992e00f3370943db0888649f633206e9dfd32fde7457ec73527775181be6040818e6ab547c9312c6b935b8264"}}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x270}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 23.607716675s ago: executing program 0 (id=340): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") setresuid(0xee00, 0x0, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0x1) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1}, &(0x7f00000009c0), &(0x7f0000000a00)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1}, &(0x7f00000009c0), &(0x7f0000000a00)=r0}, 0x20) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) (async) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r0}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d00)={@multicast2, @multicast1, 0x0}, &(0x7f0000000d40)=0xc) creat(&(0x7f0000000d80)='\x00', 0x0) (async) r6 = creat(&(0x7f0000000d80)='\x00', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)='%pi6 \x00'}, 0x20) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r8, &(0x7f0000000300)=""/176, 0xb0) (async) read$watch_queue(r8, &(0x7f0000000300)=""/176, 0xb0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x15, 0x15, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, [@jmp={0x5, 0x1, 0x8, 0x0, 0x2, 0xffffffffffffffff, 0x10}, @jmp={0x5, 0x1, 0xa, 0x2, 0xa, 0x8}, @jmp={0x5, 0x0, 0xc, 0x5, 0x2, 0x2, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000c40)='GPL\x00', 0x46b, 0x6d, &(0x7f0000000c80)=""/109, 0x40f00, 0x1, '\x00', r5, @sk_reuseport=0x28, r6, 0x8, &(0x7f0000000dc0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000ec0)=[r7, r8, 0x1], &(0x7f0000000f00)=[{0x3, 0x2, 0x4, 0x9}], 0x10, 0x976b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r1, &(0x7f0000000980)={&(0x7f0000000400)=@caif=@rfm, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)=""/219, 0xdb}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000880)=""/86, 0x56}], 0x4, &(0x7f0000000900)=""/115, 0x73}, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r9) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="4100000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB="c0dcd9f36657beb572eff14e5c93603c9409e43e0372415b18affa322d5c9d3b343650e77a1a64bf000000002b515978ef2764108d27f86bc4ff418cfa3bb2fb08b9ed8243aa3ae2d27b6da9694ae998cb3a71503a1036f34a291f6113b599fdb555f26a4c5267f079b6404d7e79c1978892054b9318a7581734c7ed63f5d56e7c4c84792e6669413e3015c60b931fe795a995df847df25518cf9152dbf9f1241b7dbf0fa74c2557"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="4100000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB="c0dcd9f36657beb572eff14e5c93603c9409e43e0372415b18affa322d5c9d3b343650e77a1a64bf000000002b515978ef2764108d27f86bc4ff418cfa3bb2fb08b9ed8243aa3ae2d27b6da9694ae998cb3a71503a1036f34a291f6113b599fdb555f26a4c5267f079b6404d7e79c1978892054b9318a7581734c7ed63f5d56e7c4c84792e6669413e3015c60b931fe795a995df847df25518cf9152dbf9f1241b7dbf0fa74c2557"], 0x3c}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r11, r1, 0x0, 0x6, &(0x7f0000000140)="059b780ce046", 0x8, 0xe, 0x6, 0x4, 0x8, 0x3, 0x5, 'syz0\x00'}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 23.232957648s ago: executing program 0 (id=352): getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1c08, &(0x7f00000002c0)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@euid_lt={'euid<', r0}}, {@audit}]}, 0xff, 0x4a1, &(0x7f00000004c0)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) wait4(r1, 0x0, 0x20000000, &(0x7f0000000580)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, &(0x7f0000000340)) connect$netlink(r3, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc) (async) connect$netlink(r3, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4442, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4442, 0x0) pwrite64(r4, 0x0, 0x0, 0x100000000) (async) pwrite64(r4, 0x0, 0x0, 0x100000000) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x44082, 0x0) 22.244800966s ago: executing program 0 (id=368): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x7, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170007009500000000000000000000000000f3c0d45dd09f8934"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111c300000000008510000002000000850000000000000095000000000000009500b0059d350000f8eb70c3d9330b16491e095815635bf7490c180e3be703966bd8fdc277008531ccb9d9ae8dc9e78d9dc5311486fd1d2bfab99b08b4d46852f103d4ed539d04b034d645e2ea69674b1749efdc6a03ab8d5c3d2a2ed722271db8f4b166d4a579abbfc27974c01b80c3a1f70b876f255bfb3bb39933f9ee13d85b22d8baa7779c763dfa6878ca5e854b08fd8b366d8164314aa1be6459386f18edfee97a17edb600561991571ee2e724cafa627c81537e3f6f9e330a7bb29186bd091fd977b1888b79d98a6eb3c52e3b47017e16f64200c2fb1bac037531ddf00ed783523f98a3c4386f9d437ef9ff5627fd23fc47b331848b78e563db448604fae948d997f459070f82255b0c169d6c2b29426b25c800"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x6}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x40c5) io_uring_setup(0x39d0, &(0x7f0000000040)={0x0, 0x39b2, 0xc000, 0x2, 0x339}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000100)=0xc, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x44093) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) socket$inet_sctp(0x2, 0x1, 0x84) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) 22.090030645s ago: executing program 32 (id=368): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x7, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170007009500000000000000000000000000f3c0d45dd09f8934"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x6}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x40c5) io_uring_setup(0x39d0, &(0x7f0000000040)={0x0, 0x39b2, 0xc000, 0x2, 0x339}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000100)=0xc, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x44093) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) socket$inet_sctp(0x2, 0x1, 0x84) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) 12.256524766s ago: executing program 4 (id=562): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(0x0, r2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="2c001280110001006272696467655f736c617665000000001400058008002200", @ANYRES32=0x0, @ANYBLOB="4242250007f70000d01a7d0b8d90c5add9dd4f2bd8185480040000000000001e0e12bfd26f9a8a5ca207ddda60fcdbd77c58417dc4419285dcef521bdec947cc1c78e61fd78d9b81e538a9000000bbfe10ba4835e190c008a23b74ba4770761a525b0cd019c3"], 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000000c0)={@dev, @remote}, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x1, 0x15, 0xfff, 0x5, 0x76, 0xb6, &(0x7f0000000400)="de610d7cece4487880396b2c3934534230d02187cf17b8278423a9d3b370bcc11e2adffba5aea36b7dcad288f7d8f8cfbc9aecdbbbf1008f42261c35291ea1f768c8f2876a14c96091bf9e648be79b394631ef1bc5050de4eca829366f3428e9873bc6b0a0ebed239ce55c0ec6dfce0f6a8b91d48393"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r5, @ANYRES8=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x4008050) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, 0x0, 0x100, 0x4, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000801}, 0x44810) socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="3b02000001000000000000001000000095000000000000008ec0c5beff3625ea0df1da7cf0e65c15aa1b1e4c76e6240c797cfc18323a16c4b43b69a816aebc666b6f49e1e39bacaa451ad28fa2a300e2ef2980399d921507ef1ab8319579f7b14953ab2be946b4a70039ea660df987fc7acf6c25a6109093e60711ac2d73d55f6a2c4432e1d1475fd59114d74146f96f2b669ee3a8ab6ef7fa6d6d26d2af51f8128bc37dd4f7734fcf2857"], 0x0}, 0x94) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) prctl$PR_SET_SECCOMP(0x16, 0xf44215f1a6d7202c, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0x8, 0x4, 0x9, 0xffffffff}, {0x4, 0x9, 0x14, 0x4c}, {0x8001, 0x6, 0xf9, 0x4}, {0x3ff, 0x3, 0x1, 0x7}, {0xff, 0x3, 0xd, 0x8}, {0xfffd, 0x7b, 0x4, 0x42800000}, {0x6, 0x9, 0xa, 0xa8c}]}) 12.18026422s ago: executing program 4 (id=564): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nodioread_nolock}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1, 0x4000800) rename(&(0x7f0000000080)='\x00', &(0x7f0000000140)='./file1/file0\x00') 12.115729934s ago: executing program 4 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000280)=0x9, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffece}, 0x8a}], 0x1, 0x10022, 0x0) read(r0, &(0x7f0000000140)=""/157, 0x9d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000040800034000000c1a080003400000000908"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11.832752431s ago: executing program 4 (id=577): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000300)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,iocharset=macgreekAmap=acorn,iocharset=iso8859-2,session=0x0000000000000058,unhide,mode=0xfffffffffffffffe,dmode=0x0020000000000003,fscontext=system_u,permit_directio,\x00'], 0xfa, 0x69f, &(0x7f0000000f00)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000180)={&(0x7f0000000480)=""/152, 0x98}) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000e1ff00850000007d00000095"], 0x0, 0x10000}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) execve(0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x103000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21031fbd7000fddbdf25010000", @ANYRES32=r6, @ANYBLOB="0c0099000900"], 0x30}, 0x1, 0x0, 0x0, 0x40040d2}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)={0x5e8, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff, 0x6f}}}}, [@NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff7, 0x3, 0x2, 0x3774, 0x9872, 0x2, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x1020, 0x0, 0x101, 0x7, 0x58, 0x1a7, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfc3, 0xc7, 0x3, 0x0, 0x6, 0x8, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x8001, 0x5, 0x0, 0x5, 0x8, 0x4, 0xe9e1]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0xc, 0x36, 0x16, 0x16, 0x2, 0xc, 0x1, 0x6c, 0x48, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x61, 0x8001, 0x8, 0x1, 0x7, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6836, 0x7ff, 0x3ff, 0x100, 0x4, 0x101, 0xad2]}}]}]}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x401, 0x4, 0x800, 0x6, 0x80, 0x8000, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x5, 0x60, 0x9, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0xd, 0x3, 0x3, 0x2, 0xfff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0xa}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x4, 0x3}, {0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x5}, {0x6, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0xa}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x1b, 0x1, 0x5]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8001, 0x200, 0x2, 0x4, 0x6d, 0x5000, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x4}, {0x2, 0x2}, {0x1}, {0x4, 0x6}, {0x1, 0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0x9}, {0x6, 0x4}, {0x7, 0x7}, {0x2, 0x1}, {0x6}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x5}, {0x4, 0x2}, {0x3}, {0x3, 0x8}, {0x3, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x5, 0x9}, {0x2, 0x9}, {0x2, 0x2}, {0x6}, {0x7, 0x1}, {0x6, 0x8}, {0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0xf001, 0x2, 0x7, 0x4c9, 0x1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x30, 0x22, 0x36, 0x6, 0xb, 0x48, 0xb, 0x5, 0x3, 0x4b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xaee, 0xf, 0x3, 0x8000, 0xc8, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x96d5, 0x8, 0x4, 0x3, 0x81, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x4}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0xb}, {0x6, 0x7}, {0x3, 0x2}, {0x2, 0x4}, {0x5}, {0x5, 0x2}, {0x6, 0x9}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x0, 0x11}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x2}, {0x6, 0x1}, {0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x8000, 0x7b, 0x0, 0x3, 0x5952, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff00, 0x800, 0xfff7, 0x6, 0x9, 0xd91, 0x400, 0x1]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x6}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x8}, {0x2, 0x3}, {0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff, 0x6, 0x3, 0x3, 0x81, 0xffff, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x6}, {}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x4, 0x8}, {0x6, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x5, 0x8}, {0x6, 0x3}, {0x1}, {0x3, 0x8}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x1}, {0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x9}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x32f6, 0xc, 0x400, 0x8001, 0xfff7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9, 0xbf7, 0x7, 0x59, 0xdcdf, 0xfffb, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x835d, 0x100, 0x1000, 0xcaa, 0x7, 0x44c]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x16, 0x2, 0x12, 0x30, 0x36, 0x0, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x6, 0x1d, 0x6, 0x36]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x1, 0x12, 0x30, 0x60, 0x5, 0x60]}]}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xc9, 0x1, 0x7, 0x6, 0xdd82, 0x9, 0x4]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0xff7f, 0x7, 0x6, 0xf, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x3}, {0x6}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0xa}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x0, 0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x5, 0xa}, {0x5, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0x9}, {}, {0x2, 0x6}, {0x2, 0x7}, {0x3}, {0x4, 0x1}, {0x7}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x401, 0x7, 0x2, 0xa00, 0x9, 0x5, 0xcb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0xa}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x5, 0x30, 0x1, 0x30, 0xb, 0x18, 0xc, 0x16, 0x36, 0x1, 0x24, 0x5, 0xc, 0x1, 0x6c, 0x6c, 0x5]}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x1, 0x5, 0x1ff, 0x8, 0x3c, 0x1]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x1}, {0x6, 0x7}, {0x6, 0x9}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x2}, {0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x9}, {0x6, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {}, {0x1, 0x9}, {}, {0x1, 0x2}, {0x1, 0x8}, {0x6}, {}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x3}, {0x6, 0xe}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x2, 0x4}, {0x2}, {0x7, 0x7}, {0x5, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x2, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0x1}, {0x1}, {0x6, 0x9}, {0x5}, {0x2}, {0x4, 0x4}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x4}, {0x0, 0xa}, {}, {0x3, 0x5}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0x7}, {0x1}, {0x4, 0x7}, {0x2, 0x3}, {0x1, 0x1}, {0x4, 0x4}, {0x6}, {0x4, 0x2}, {0x6, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x9}, {0x5, 0x9}, {0x7, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x6, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0x1, 0x5, 0x9, 0x49d0, 0x8]}}]}]}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x20040001}, 0x24000001) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0314644f00021202004788aa96a13b", 0x10, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000002000000"], 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000ac14140b010000400100"/39, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 11.596614935s ago: executing program 4 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89101) fchdir(r2) close(r2) move_mount(0xffffffffffffff9c, 0x0, r1, 0x0, 0x46) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11.232341407s ago: executing program 4 (id=581): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/freeze_filesystems', 0x0, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02001c0002000000050000ee00000020000000000400000000000000"], 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000100)) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb86dd6300000000383afffe880000000000000000000000000001ff02000000000000000000000000000101049078810022006cde2efd02812f00ff02000020d200000000000000000001fc0000000000000000000000000000010100000000000000"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pie={{0x6}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x3ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc779, 0x641e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xc66}, 0x2081, 0x10000, 0x6, 0x2, 0x10b, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x63f5, &(0x7f00000001c0)={0x0, 0xab4e, 0x2, 0x1, 0x194}, &(0x7f0000000240), &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.213153218s ago: executing program 33 (id=581): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/freeze_filesystems', 0x0, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02001c0002000000050000ee00000020000000000400000000000000"], 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000100)) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb86dd6300000000383afffe880000000000000000000000000001ff02000000000000000000000000000101049078810022006cde2efd02812f00ff02000020d200000000000000000001fc0000000000000000000000000000010100000000000000"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pie={{0x6}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x3ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc779, 0x641e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xc66}, 0x2081, 0x10000, 0x6, 0x2, 0x10b, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x63f5, &(0x7f00000001c0)={0x0, 0xab4e, 0x2, 0x1, 0x194}, &(0x7f0000000240), &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.947287958s ago: executing program 2 (id=684): unshare(0x20040600) r0 = socket$unix(0x1, 0x5, 0x0) unshare(0xa050000) timerfd_gettime(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xf95e, 0x8, 0x619, 0x978, 0x4a, 0x2, 0xca}, &(0x7f0000000600)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000640)={r5, 0x8d19}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000440)={r6, 0x5}, &(0x7f0000000480)=0x8) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x218001, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000300)=r7) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40a00}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000045a6162ba67d73f6a3045384041cec4c9eaa57b000fee23483a87dae3266b1a64254ec869dfdc2a007b2d174b87b71c4ba1a44b459a49b675450f6ad82b0b109cc3f4fb29539d3b325e10600b37a0f53169018b4a2d1ea561742bd09a7b4384e9429db17b5b5e3b58514f80906c7d595f4427d1976ef71f4c95903fd769c75dc5edf1979b77011302446d76538", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf250a000000080037000000000008003700000000000c0050800800070000000000050008000000000004000b00"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) writev(0xffffffffffffffff, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3}, 0x4) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x11, 0x0) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x3}, 0x4) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setsig(0x4203, r9, 0x400, &(0x7f0000000140)={0x3a, 0xb, 0xfffffffa}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 4.761681889s ago: executing program 2 (id=690): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6021, 0x4005, 0x40000b, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time={0x5, 0x2}, {0x4, 0xfc}, {0x0, 0x3}, @quote={{0x5, 0x9}, 0x8}}, {0xc3, 0x0, 0x80, 0x3, @time={0x4, 0xffff}, {0x0, 0x32}, {}, @connect={{0x4, 0x8}, {0x2, 0x3}}}], 0x38) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x800, &(0x7f0000000100)={0x4, 0xf0, 0x20000}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 4.228391951s ago: executing program 2 (id=699): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080), 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x9}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x3}], &(0x7f00000004c0)='GPL\x00', 0x3ff, 0xd8, &(0x7f0000000500)=""/216, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x5, 0x4, 0x4}, 0x10, 0x1d871, 0xffffffffffffffff, 0x3, &(0x7f0000000880)=[0x1], &(0x7f00000008c0)=[{0x3, 0x3, 0x6}, {0x5, 0x4, 0xd, 0x5}, {0x1, 0x2, 0x5, 0x8}], 0x10, 0x3}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x3}], &(0x7f00000004c0)='GPL\x00', 0x3ff, 0xd8, &(0x7f0000000500)=""/216, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x5, 0x4, 0x4}, 0x10, 0x1d871, 0xffffffffffffffff, 0x3, &(0x7f0000000880)=[0x1], &(0x7f00000008c0)=[{0x3, 0x3, 0x6}, {0x5, 0x4, 0xd, 0x5}, {0x1, 0x2, 0x5, 0x8}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4f32, 0x8, 0x6, 0x2b0000000000, 0x85d4}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4f32, 0x8, 0x6, 0x2b0000000000, 0x85d4, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) poll(&(0x7f0000001640)=[{r4, 0x6000}, {r4, 0x14431}], 0x2, 0x76) (async) poll(&(0x7f0000001640)=[{r4, 0x6000}, {r4, 0x14431}], 0x2, 0x76) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1f, 0x0, 0xffffffff, 0x8000, 0x5, 0xffffffffffffffff, 0x9}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1f, 0x0, 0xffffffff, 0x8000, 0x5, 0xffffffffffffffff, 0x9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000fcf7efff0000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000150f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x5810c0, 0x0) ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000000340)=0x8000) (async) ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000000340)=0x8000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_ts_info={0x33}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)={0x1d4, r10, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xaf}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdb, 0x3, "aec8d369baa6aedd33f86a0ff672dd811e5b6a6a603eae6b0700152eeb3f778d04a447400748434bfb999894398e115183bcd06084d0f12b7fcdf03f0e314edc995b2f9f0c45001c30c152bef0c96c9f4e86782f8767c77d1df4d425e4df6a691390408cce4abec9badc055e2ede673e0f8dec09beee3d0c0feb444f0ae494777b339864672bce1aca9e6d4653b6250a191a2864892f914d286505251d0693e2259276299263c33f7c8a5b706a68e0af6ac2cc04f5814d5b46e13a0f0b36dad8211456b4cf1489f11a8ce9b46a7eb5068f91bba412caea"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "449ef27bb0e25308091299a640d06d3979356ae24c3384c6ec4c7aa5f31b3036cd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "651d8fae6386ba77ef0947b86edd1ac2d00d63830db375260306b22a8b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa7bf}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4}, 0x5) (async) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)={0x1d4, r10, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xaf}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdb, 0x3, "aec8d369baa6aedd33f86a0ff672dd811e5b6a6a603eae6b0700152eeb3f778d04a447400748434bfb999894398e115183bcd06084d0f12b7fcdf03f0e314edc995b2f9f0c45001c30c152bef0c96c9f4e86782f8767c77d1df4d425e4df6a691390408cce4abec9badc055e2ede673e0f8dec09beee3d0c0feb444f0ae494777b339864672bce1aca9e6d4653b6250a191a2864892f914d286505251d0693e2259276299263c33f7c8a5b706a68e0af6ac2cc04f5814d5b46e13a0f0b36dad8211456b4cf1489f11a8ce9b46a7eb5068f91bba412caea"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "449ef27bb0e25308091299a640d06d3979356ae24c3384c6ec4c7aa5f31b3036cd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "651d8fae6386ba77ef0947b86edd1ac2d00d63830db375260306b22a8b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa7bf}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4}, 0x5) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='net/connector\x00') 4.144420425s ago: executing program 2 (id=700): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3fd87000) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000040)) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x15, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0xffffff4f}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) r3 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x6a040000) r4 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r4, 0x1, 0x2, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x50, r3, 0x94171000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0xc, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x1}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {0x3}, {}, {0xffff, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x20, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0xd9, 0x4) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) 3.176600923s ago: executing program 2 (id=719): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) dup(r0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.633063575s ago: executing program 2 (id=727): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x7) finit_module(r0, 0x0, 0x3) rename(&(0x7f0000000440)='./file1\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.618623316s ago: executing program 34 (id=727): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x7) finit_module(r0, 0x0, 0x3) rename(&(0x7f0000000440)='./file1\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.504140681s ago: executing program 3 (id=749): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0x10084b2, &(0x7f0000000700)=ANY=[@ANYBLOB="76c6b1f854bb5ab8efdc187ab65eac01d7f2029ff846e74e540da81d74f9c4c84a535b3ca55732a835ef285aaee983784497df288293dcd80d9d510a3d817caa22e886121ffc87828617fff03f9231ef321688cd38fa7f543bf6da85b421baf361fc8687e08c4e043b6b775b55bb6221317cb21acce3fb87e9b3345658dc7cb5005be9b65b9755aef97cb519ec7f0633e0d562374018fc9ed92b8e2da6118c26eb7a2892b787aa96ed4ad732cccaad", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0xc, 0x0, &(0x7f0000000680)) (async) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0x10084b2, &(0x7f0000000700)=ANY=[@ANYBLOB="76c6b1f854bb5ab8efdc187ab65eac01d7f2029ff846e74e540da81d74f9c4c84a535b3ca55732a835ef285aaee983784497df288293dcd80d9d510a3d817caa22e886121ffc87828617fff03f9231ef321688cd38fa7f543bf6da85b421baf361fc8687e08c4e043b6b775b55bb6221317cb21acce3fb87e9b3345658dc7cb5005be9b65b9755aef97cb519ec7f0633e0d562374018fc9ed92b8e2da6118c26eb7a2892b787aa96ed4ad732cccaad", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0xc, 0x0, &(0x7f0000000680)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) 1.223576188s ago: executing program 3 (id=753): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000020a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140000000008000"], 0x92fc}}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) 1.206174729s ago: executing program 5 (id=754): r0 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) (async, rerun: 64) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0x9) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) (async, rerun: 32) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) (rerun: 32) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r6) (async) socket$tipc(0x1e, 0x5, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async, rerun: 64) ftruncate(r0, 0x1000000) (rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r8, &(0x7f00000000c0)=ANY=[], 0xffffff6a) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r9, 0x4, 0x2200) (async) splice(r7, 0x0, r10, 0x0, 0x10003, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.159414052s ago: executing program 3 (id=756): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x11000, 0x0, 0x25, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) 1.077013337s ago: executing program 5 (id=759): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022bf4be300"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = syz_io_uring_setup(0x10ab, &(0x7f00000000c0)={0x0, 0x7496, 0x0, 0x1, 0x411001f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x5, {0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}) io_uring_enter(r5, 0x351a, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c2200001500010000000000fbdbdf250a00"], 0x225c}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r8, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xe}, {0x4, 0xfff1}, {0x9, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 851.13589ms ago: executing program 1 (id=767): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x9, 0x9, 0x6, 0x8084, 0x3, 0x2, 0x2]}}]}]}]}, 0x38}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 788.435784ms ago: executing program 5 (id=768): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xd9c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0xd88, 0x1, [@m_police={0xd84, 0x1, 0x0, 0x0, {{0xb}, {0xc84, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x72}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000000, 0x0, 0xe1, 0x3ff, 0x1, 0x3ff, 0x233d, 0x3, 0xe675, 0x0, 0xee, 0x24, 0xffffff17, 0x6, 0x7, 0x9, 0x88, 0x4, 0x7, 0x6, 0xf, 0x3, 0xffffffff, 0x4, 0x0, 0x9, 0x0, 0x9, 0xffffffc0, 0x2, 0x9, 0xf, 0x4, 0x40, 0x5, 0x7, 0x1000, 0x4, 0xc9a, 0x8, 0xdfd, 0x20200000, 0x6, 0x4, 0x800, 0x9, 0x6, 0x8, 0x49, 0xb, 0x5, 0xb409, 0x3, 0xd5, 0x6, 0x9, 0x6, 0x3ff, 0x53ee, 0x100, 0x8, 0xb, 0xfffffff9, 0x2, 0x5, 0xfff, 0x8, 0x2, 0x8, 0x2, 0xa4a6, 0x0, 0x9, 0x2b, 0x4, 0x4, 0x86, 0x6, 0x56234900, 0xff4d8ea, 0x6, 0x4, 0x6, 0x3, 0x0, 0x7, 0x0, 0x4, 0x9, 0x80000001, 0x9, 0x8, 0x5, 0x9, 0x1, 0x6, 0x10000, 0xfffffffd, 0x4, 0x690, 0x9, 0x2, 0x9, 0x81, 0x8, 0x14, 0xfff, 0x5d3, 0xfffffffb, 0xffffff01, 0x6, 0x7, 0xdf, 0x7, 0x4, 0x6, 0xffff8001, 0xb, 0x463b, 0x81, 0x1, 0x338, 0xe, 0x7, 0x5, 0x40, 0xe90, 0x4a2, 0x3, 0x6, 0x5, 0x1, 0x200, 0x89a, 0x1000, 0xb3, 0x7ff, 0xfffffff9, 0xfffffff9, 0x2, 0xaef, 0x9d, 0xfffffff6, 0x0, 0x20, 0x9, 0x9, 0x4, 0xc515, 0x6, 0x4, 0x6, 0x101, 0x8, 0x5, 0x100, 0x0, 0x7, 0x588, 0x1, 0xb65, 0x4, 0x49fbdb47, 0x8, 0x5, 0x8b, 0x9, 0x8, 0x2cee, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x4, 0x4, 0x92c8, 0x5, 0x1b, 0x2, 0x6d, 0x5, 0x10, 0xe1, 0x3, 0x10000, 0x1, 0x57e, 0x9, 0x4, 0x6, 0x1, 0x6, 0x8001, 0x67, 0x7ff, 0x7fff, 0xd58d, 0x5, 0x0, 0x155e, 0xfe000000, 0x0, 0x7, 0xd2, 0x6, 0x8, 0x1, 0x4, 0xfffffff9, 0x6, 0x0, 0x6, 0x7ff, 0xd708, 0x28, 0xfff, 0x6, 0x0, 0xd, 0x401, 0xc, 0x5, 0x6, 0xea0e, 0x0, 0x3, 0x8001, 0xa25, 0xa, 0x1, 0x2, 0xfffffffb, 0xa5, 0x0, 0x0, 0xc, 0x5, 0x77d6, 0x2, 0xfffffff2, 0xe7, 0x2, 0x7fff, 0x5, 0x5d20, 0x0, 0x10, 0x18d0, 0x1, 0xd, 0x2, 0x1, 0x350, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x4, 0x8, 0xfff, 0x800, 0x5, 0x4b, 0xd02, 0xc29, 0x8, 0x1, 0xfff, 0x51d0f0c9, 0x6, 0x1, 0xd3fe, 0x1, 0x3, 0x3ff, 0x0, 0x0, 0x200, 0x40, 0xfffffffb, 0xd1, 0xfff, 0x7, 0x0, 0xfffffff2, 0xff, 0x6, 0x4, 0x6, 0x5, 0x4, 0x3, 0x609d, 0x0, 0x63, 0x4, 0x808b8d59, 0x9, 0x76a, 0x6, 0x22d3, 0x9, 0x7fff, 0x2, 0x3, 0x6, 0x0, 0x4, 0x40, 0x99e, 0x79e, 0xfffffff9, 0x3e, 0x4, 0x1, 0x7000, 0x3, 0x85b, 0x7fff, 0x8, 0x0, 0x400, 0x9, 0x4, 0x2, 0x0, 0x5, 0xd, 0x5, 0x5, 0x5, 0x7, 0xfb, 0x1, 0x3ff, 0x9, 0x7ff, 0xffffffc0, 0x60, 0x1, 0x4, 0x9, 0x3, 0x0, 0xffffffff, 0x7f, 0x8, 0x80, 0x2, 0x2, 0x7, 0x2, 0x3, 0x1, 0x0, 0x17, 0xfffffff0, 0x2, 0x9, 0x9, 0x4, 0x6e3b2a63, 0x1ca, 0xfffffffb, 0x6, 0xfe, 0x10000, 0xe, 0x3, 0x7, 0x8, 0x80000001, 0x7, 0x8b42, 0x4, 0x3025, 0x400, 0x5, 0xfffffff7, 0x0, 0x0, 0x10, 0x2, 0x8, 0x38, 0x6, 0x8000, 0xfffff801, 0x6, 0x7, 0x7, 0x0, 0xd95b, 0x81, 0xc, 0x400, 0x6, 0x3, 0x6, 0x6, 0x40, 0xfff, 0x6, 0x1e2, 0x6, 0x9, 0x4718, 0x9, 0x60000000, 0x5, 0x7, 0x5, 0x2, 0x5, 0x6, 0x5, 0x2a89, 0x1ff, 0x3, 0x6e25, 0x6, 0x1, 0xd063, 0x7, 0x200, 0x400, 0x1, 0x2751, 0x3, 0x4, 0xe344, 0x2, 0x3, 0x7, 0x9, 0x1, 0x1, 0x63b8, 0x0, 0x6, 0x6, 0x10, 0x2, 0xfa4b, 0xb0, 0x72, 0x49, 0x3ff, 0x1ff, 0x7, 0x2, 0x3, 0x5d, 0x9, 0x2, 0x7f, 0x3, 0xfffffff7, 0x8, 0x800, 0x1ff, 0xfffffbff, 0x7fff, 0x2, 0x8, 0x6, 0x257, 0x0, 0x256, 0x1, 0x7, 0x9, 0x5, 0x0, 0x4, 0x3, 0x4, 0x2717, 0x3ff, 0x2f8, 0x2, 0x1, 0x7, 0x1, 0x4, 0x800, 0x1, 0x80, 0xf87a, 0x7, 0x3, 0x81, 0x76, 0xfffffffa, 0x1ff, 0x5, 0xfffffbff, 0x7, 0x9, 0x6, 0x80, 0x2, 0x10, 0x10, 0x8, 0x5d9, 0x0, 0x0, 0x9, 0xeef, 0x8, 0xba]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xcf}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x89, 0xa52, 0x6, 0x3, 0x1106, 0x0, 0x7fffffff, 0x3, 0x80b, 0x68, 0x8, 0x1, 0x2, 0x5, 0x0, 0x9, 0x0, 0x101, 0x7f, 0xfffffff7, 0x8, 0x7, 0x6, 0x0, 0x400, 0x7, 0x10001, 0x3, 0xfff, 0x2a, 0xb47, 0x7f, 0x7fff, 0x1, 0x800, 0x3, 0x5, 0xb, 0x401, 0x10, 0xb, 0x401, 0x739, 0x4, 0x9998, 0x3, 0xd90, 0x200, 0x1, 0x0, 0x95, 0x800, 0x0, 0x5, 0x6, 0xffff, 0x7fff, 0x1, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x2, 0x2, 0x1, 0x3, 0x8, 0x32, 0x3, 0x3, 0x6, 0xfffffffe, 0x7, 0x40, 0x401, 0x7ff, 0x81, 0x34b2, 0xb, 0x25eb, 0x2, 0x5, 0x40, 0x0, 0x3, 0x73, 0x4, 0x10000, 0x9, 0x8, 0x1, 0x8, 0xfffffffc, 0x6, 0x4, 0x4, 0x1000, 0x2, 0x4, 0x3, 0x5, 0x6, 0xd3f, 0xffffffc0, 0x0, 0x4, 0x4, 0xfff, 0x4, 0xc902, 0x1, 0x3, 0x400, 0x9, 0x8, 0x8, 0x4, 0x9, 0x3, 0x2, 0x0, 0x6, 0x8, 0x1000, 0x60, 0x7, 0x80000001, 0x6, 0x2, 0x4, 0x8, 0x6, 0x7fff, 0x1, 0x9, 0x4, 0x2, 0x7, 0x8000, 0x5, 0x4, 0x8, 0x7, 0x7f0, 0xc3, 0x7fff, 0x800, 0x9, 0x1000, 0x3, 0x7, 0x3ff, 0x2, 0xfba, 0x8a2, 0x7fff, 0x8, 0x3e06, 0x5bf7, 0x1, 0x401, 0x6081, 0x6, 0x7, 0x6, 0x1, 0x8, 0x1, 0xaa0, 0x3, 0xffff0001, 0xc, 0x7, 0xafea, 0xd, 0x200, 0xb, 0x10000, 0xfffffff1, 0xd746577d, 0xed, 0x8000, 0x9f6, 0x9, 0xfffffffa, 0x7, 0x0, 0xffffff80, 0x1, 0x2, 0x1, 0x2, 0xfd, 0xfffffffa, 0x0, 0x8, 0x4, 0x5, 0x3, 0x6, 0x8, 0x7, 0x5, 0x2, 0x7fff, 0x2, 0x7, 0x3, 0x3, 0x76000000, 0x6, 0x0, 0x0, 0x431, 0x5, 0x9, 0x6, 0xfe8e, 0xaa, 0x3ec5, 0x0, 0x0, 0x4, 0x3ff, 0x3, 0x2, 0xd04a, 0xffff0000, 0x3, 0x400, 0x1, 0x1, 0x9, 0xa, 0x8, 0x1, 0x6, 0x7, 0x0, 0x1, 0x2, 0x203, 0x6, 0x81, 0x0, 0xfffffffc, 0x6, 0xfffffb75, 0x4, 0x8e, 0x9, 0x1, 0x4, 0x0, 0x6]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x4, 0x4, 0x172f, 0xfff, {0x6, 0x1, 0x9, 0x3, 0x8, 0x10001}, {0xc, 0x2, 0x1, 0x3, 0x0, 0x80000000}, 0x9, 0x1, 0x5}}]]}, {0xd7, 0x6, "a76310eff2ff71ebda98b59870ed43d230f95ce7896cd93c87eceab9f5d60165f9338742a9de4844f9a1f2300fac728c99f5610db081f75cbfdccdf49d67198d63dfb64e6a29cda1152b5ae902a5ffe25a0ed8d4b06ba6081022c182dab450298b2b728268c5e563fdc099abe55cc880118af3cb587ee9c555b9ad42d5ef145a49948334938d5985d6569bb25a6896369f417ecadaae12abd0ab3f2765069b7063427b4a8f556900f739fa1f6288982b79deeb74569c09594645de924cb391d69034907ccdca47e075aaff346710cedc360421"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xd9c}}, 0x40) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @multicast2}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], 0x12) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ff}}, 0x1, 0xff6a, 0x200, 0x8, 0x18, 0xfffffffa, 0x2}, &(0x7f00000000c0)=0x9c) 773.236145ms ago: executing program 5 (id=770): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) (rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 771.618915ms ago: executing program 1 (id=771): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) dup(r0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 738.909317ms ago: executing program 1 (id=772): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x0, @multicast}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x677, &(0x7f0000000c00)="$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") (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 652.490472ms ago: executing program 6 (id=773): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/power/disk', 0x800, 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000001cc0)=0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000000)={@id={0x2, 0x0, @b}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5ff}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0xb, 0x9, 0x9, 0x1, 0x10}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xb, &(0x7f00000000c0)=""/11, 0x41000, 0x22, '\x00', r1, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x2, 0x5, 0xfffffffc}, 0x10, 0xffffffffffffffff, r3, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=[{0x0, 0x2, 0xd, 0xa}, {0x5, 0x2, 0x5, 0x5}, {0x1, 0x4, 0x4}], 0x10, 0x4}, 0x94) 652.328982ms ago: executing program 5 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 634.555173ms ago: executing program 6 (id=775): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x16, 0xa01, 0x70bd26, 0x0, {0x1b}, [@nested={0xc, 0xad, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nodioread_nolock}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 620.166574ms ago: executing program 5 (id=776): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x21, 0xfffffffd, 0x0, 0x2006, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r5 = syz_open_pts(r3, 0x0) r6 = dup3(r5, r3, 0x0) read$watch_queue(r6, &(0x7f0000000340)=""/133, 0xc7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0x6, 0xff, 0x0, 0x0, 0xec, 0x6041, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000500), 0xd}, 0x801, 0xb9d, 0x4, 0x9, 0xa87, 0xe, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, r4, 0x6, r6, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x53, &(0x7f0000000000), 0x4) io_uring_enter(r0, 0x6e2, 0xc49, 0x1, 0x0, 0x0) r8 = msgget$private(0x0, 0x7ac) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x2c500, 0x0) recvmsg$can_bcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/173, 0xad}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/146, 0x92}], 0x3, &(0x7f0000001680)=""/4096, 0x1000}, 0x20042) msgrcv(r8, 0x0, 0x0, 0x3, 0x2000) msgrcv(r8, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) fcntl$dupfd(r0, 0x406, r5) msgsnd(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="4e078ee960b91e85779310710300017f00000000"], 0x8, 0x8fa2496c381b7ad5) 520.665709ms ago: executing program 1 (id=777): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140000000008000"], 0x92fc}}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) 518.92868ms ago: executing program 6 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe}, {0x4, 0xfff1}, {0x9, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 502.12213ms ago: executing program 1 (id=779): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f50000000000000000009078ac1414bbac1414aaa4314e214e210401907842b2a98505000000d5747fec6f655f423e423224190a6f61f0915d9edb0752f1431a910bb6bbecff"], 0x58) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r6 = socket$rds(0x15, 0x5, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), 0x0, 0x0, 0x2) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xe000202b}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000011140100fffffffd0000000008004a0000000000080003000100000008004b0028"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) epoll_pwait(r7, &(0x7f00000000c0)=[{}], 0x1, 0x799, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @private1, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x8, 0x20001, 0x2d6}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x9, 0x574}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x6, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=0x0], 0x38}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x8, 0x8000000000000001, 0x6abde47d}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES16=r4], 0x50) socket$inet6(0xa, 0x3, 0x7) 353.14041ms ago: executing program 6 (id=780): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000b80)={0x200000000000001e, &(0x7f0000000040)=[{0x5, 0x7, 0xfb, 0xf764}, {0x2, 0x2, 0x5, 0x7}, {0x70e, 0x6, 0x6, 0x8000}, {0xc, 0x5, 0xf7, 0x7}]}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) close_range(r0, 0xffffffffffffffff, 0x100000000000000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80), 0x101400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006116000000000000bf67000000000000350605000fff0720670600000b000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000607070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe320fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6ad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3d43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0ab392247a83a712282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb5915118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1878a04bbff4bbefc18f77700372471609e2c443e84ee5e9a5178f90512df04f3a0909c96632ae20c05073779fc3fa0e268c62b06e9fdc29784fef1ced98270263fc81c30f1354b319fe9d59d3101c4ee7375ff8673de5caff9e6ee73ccae77d1bf8f22330e8840af1ded6d5be627f7f87d5b12a2d6317825d77bef85313f541dcc4ff13f413db34d5da05648590a1685031e6955d4352bf0b7efd0b0a1e636b8aa4963d9f67de5ba91d501418bbeaac09bdd1059f3c3159e59000000000000000000000000000000000000000000008b81c983e0500ec4109328fe40d50e41ef67447aa97a00"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) 248.504386ms ago: executing program 3 (id=781): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) dup(r0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 247.201406ms ago: executing program 3 (id=782): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x523, 0x1, @perf_config_ext={0x200, 0x7}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x2004c0a0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r2, 0x118, 0x2, 0x0, 0x42) 233.400997ms ago: executing program 6 (id=783): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, 0x0, 0x42) (fail_nth: 2) 81.548675ms ago: executing program 6 (id=784): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x4, 0x1, 0x0, 0x0, 0x7, 0x57be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x5}, 0x1000, 0x10000, 0x8, 0x1, 0x5, 0x2020022, 0xb, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x86bc0a1e3406696d, &(0x7f0000000080)=0x9, 0x4) r2 = gettid() tkill(r2, 0x7) accept(r0, &(0x7f00000002c0)=@xdp, &(0x7f0000000340)=0x80) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00100000421004002800128008000100767469001c000280080004000a0101010800030002000000080002009db900001400030069705f76746930000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x10000}, 0x80, 0x10000, 0x40000, 0x5, 0x6, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000280)={0x6, 0x5, 0x8001, 0x7fff, 0x80}, 0x14) fchdir(r5) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50b) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010008100000008000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRESDEC=r3, @ANYBLOB="0a00a196c57c00000dc1f1aa74bf612fce00"/27], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) inotify_init() sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) 711.13µs ago: executing program 3 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x600, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 0s ago: executing program 1 (id=786): socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0xee00) tkill(r0, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf6d0e000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x42c, 0x3f4, 0x300, 0x70bd2d, 0x25dfdbfd, {0x3, 0x0, 0x1, [0xc51, 0x80, 0x5, 0xe, 0x6, 0x80, 0x5f9, 0x7, 0x3, 0x399c, 0x0, 0x5, 0xb6d, 0x0, 0x9, 0x4, 0x0, 0xba4, 0x1, 0x8, 0xfbe4, 0x0, 0xf, 0xfffffffe, 0x1, 0x4663, 0x5f7, 0x0, 0x6, 0x0, 0x2, 0x277d, 0x6, 0xfe91, 0x5, 0x3, 0x9, 0x40, 0x9, 0x8, 0x1, 0x7, 0x6, 0x0, 0x0, 0x401, 0x7, 0x4, 0x4, 0x8, 0x2, 0x8000, 0x4b, 0xfffffff8, 0x7, 0x6, 0x7, 0x6, 0x10, 0x3, 0x7, 0xffff, 0x3, 0x7], [0x1, 0x370, 0x8000, 0x4, 0x4, 0x9, 0x7, 0x9, 0x5, 0x100, 0x7fff, 0x2, 0x1, 0x3, 0x1, 0x9, 0x9, 0xffff, 0x7, 0x3, 0x3, 0x8001, 0x6, 0x100, 0x1ff, 0x1ff, 0xd95, 0x9dd0, 0xfffffff7, 0xb8c, 0x80, 0x5, 0x1, 0x4, 0xa, 0x9, 0x3, 0x15, 0x3, 0x80000000, 0x3, 0x9, 0x6, 0x7, 0x0, 0x5, 0x4, 0x2, 0x0, 0x63, 0x1, 0x2, 0x2, 0xffffffff, 0x5, 0x7, 0x4, 0x9, 0x3, 0x1, 0x6, 0xf, 0xfff, 0x3], [0x7, 0x2, 0x3, 0x5, 0xd3, 0x5b5, 0x4, 0xc, 0x80, 0xd, 0x2, 0x10, 0x2566, 0x2, 0x8, 0x4, 0x5, 0x8, 0x7, 0x1c, 0x206d, 0x5, 0xa, 0x9, 0x8, 0x8, 0xe, 0x3, 0x6, 0xfffffffc, 0xb, 0x5, 0x2, 0x9, 0x1, 0x0, 0x2, 0xc3, 0x971e, 0x8, 0x6, 0x6, 0x950, 0x1, 0x8, 0x9, 0x80, 0x1, 0x1, 0x80000001, 0x1, 0x4, 0xfffffff8, 0x0, 0xc, 0x1, 0x9, 0x1, 0x9def, 0xefdf, 0x1000, 0xfffffffa, 0x5, 0x3], [0xdb, 0x2, 0x9, 0x1, 0x7ff, 0xf, 0x6, 0x7, 0x2, 0x3, 0x1, 0x200, 0x0, 0xffffffff, 0x7f, 0x592, 0xfd95, 0x7, 0x0, 0x9, 0x7, 0x8, 0x3ff, 0x0, 0x8, 0x0, 0x8, 0xe, 0x3, 0x9, 0x9, 0x6e, 0x3, 0xb, 0x4, 0x3, 0x7, 0xc4b, 0x4, 0x6, 0x90e, 0x99d, 0xffffff01, 0xffffffff, 0x30ec, 0xffffffff, 0x4, 0x3, 0x7fff, 0x7fb5, 0x9, 0x9, 0x1c000, 0x3, 0x2078, 0x7, 0x9, 0x7, 0x4, 0x1800, 0x101, 0xe82, 0x7, 0x4], 0xb, ['mirred\x00', '\x00', '(*\x00']}, ["", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write(r3, &(0x7f0000000000)="43c41dfb03e98bc6bbf648d6a1ad7d3c1cd79c0dbbe4b872743c86a5dfed84c699", 0x21) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_clone(0x10100, &(0x7f0000000100)="90f76003dcadadce1a7f1a3e5ef785fa4382f3cf2347f5fd8f6e4e8bcf9d2ced8084fb937a646500ac40ef4313aedb2bd12296552668ef49d11b85ad91cbbf7ccc1cfdea17622955aa2d56b42b7c2ed28bf0ec147e9092ddb10c9c30b2a524f0f7b4e353d8b270533be88b95", 0x6c, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="64c0ac6c896fa18f62d4") kernel console output (not intermixed with test programs): 29809.964:379): avc: denied { remount } for pid=4108 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.069897][ T29] audit: type=1400 audit(1769329810.054:380): avc: denied { ioctl } for pid=4123 comm="syz.0.187" path="socket:[7519]" dev="sockfs" ino=7519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.070558][ T4124] capability: warning: `syz.0.187' uses deprecated v2 capabilities in a way that may be insecure [ 38.123426][ T4127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.143163][ T29] audit: type=1400 audit(1769329810.134:381): avc: denied { getopt } for pid=4128 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.186046][ T4137] __nla_validate_parse: 14 callbacks suppressed [ 38.186063][ T4137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.192'. [ 38.217032][ T4139] loop0: detected capacity change from 0 to 512 [ 38.223771][ T4139] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 38.234681][ T4139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.193'. [ 38.241984][ T3305] udevd[3305]: incorrect jbd checksum on /dev/loop0 [ 38.250234][ T29] audit: type=1400 audit(1769329810.234:382): avc: denied { create } for pid=4138 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 38.342259][ T4149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 38.351523][ T4149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4149 comm=syz.1.197 [ 38.364193][ T4149] netlink: 'syz.1.197': attribute type 27 has an invalid length. [ 38.394910][ T4149] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.402138][ T4149] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.443707][ T4149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.453488][ T4149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.468828][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 38.505202][ T4153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.513329][ T4153] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.522218][ T4153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.543015][ T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.554604][ T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.563729][ T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.572745][ T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.604867][ T4163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.202'. [ 38.620702][ T4163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'. [ 38.629612][ T4163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'. [ 38.666889][ T4167] loop0: detected capacity change from 0 to 512 [ 38.682929][ T4170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.206'. [ 38.712948][ T4172] loop3: detected capacity change from 0 to 512 [ 38.746554][ T4175] loop2: detected capacity change from 0 to 256 [ 38.753751][ T4177] netlink: 256 bytes leftover after parsing attributes in process `syz.1.205'. [ 38.753794][ T4172] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.762752][ T4177] netlink: 72 bytes leftover after parsing attributes in process `syz.1.205'. [ 38.787474][ T4175] FAT-fs (loop2): Directory bread(block 64) failed [ 38.794251][ T4175] FAT-fs (loop2): Directory bread(block 65) failed [ 38.800966][ T4175] FAT-fs (loop2): Directory bread(block 66) failed [ 38.803587][ T4172] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 38.807563][ T4175] FAT-fs (loop2): Directory bread(block 67) failed [ 38.823214][ T4172] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.207: bg 0: block 248: padding at end of block bitmap is not set [ 38.828605][ T4175] FAT-fs (loop2): Directory bread(block 68) failed [ 38.849394][ T4175] FAT-fs (loop2): Directory bread(block 69) failed [ 38.849494][ T4172] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.207: Failed to acquire dquot type 1 [ 38.856010][ T4175] FAT-fs (loop2): Directory bread(block 70) failed [ 38.867697][ T4172] EXT4-fs (loop3): 1 truncate cleaned up [ 38.873989][ T4175] FAT-fs (loop2): Directory bread(block 71) failed [ 38.879719][ T4172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 38.886225][ T4175] FAT-fs (loop2): Directory bread(block 72) failed [ 38.905255][ T4175] FAT-fs (loop2): Directory bread(block 73) failed [ 38.914921][ T4172] syz.3.207 (4172) used greatest stack depth: 8960 bytes left [ 38.927668][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 38.972282][ T4188] loop3: detected capacity change from 0 to 128 [ 38.983268][ T4185] loop4: detected capacity change from 0 to 8192 [ 39.045032][ T4185] tc_dump_action: action bad kind [ 39.083239][ T4185] netlink: 'syz.4.210': attribute type 39 has an invalid length. [ 39.135824][ T4197] netlink: 'syz.3.212': attribute type 4 has an invalid length. [ 39.145139][ T4197] netlink: 'syz.3.212': attribute type 4 has an invalid length. [ 39.149504][ T4200] EXT4-fs: Ignoring removed orlov option [ 39.154660][ T36] lo speed is unknown, defaulting to 1000 [ 39.164289][ T36] syz2: Port: 1 Link ACTIVE [ 39.165067][ T4200] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 39.197484][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.203012][ T4200] FAT-fs (loop2): IO charset cp857 not found [ 39.407033][ T4217] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 39.426943][ T4217] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 39.455123][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.488972][ T4232] tun0: tun_chr_ioctl cmd 2147767507 [ 39.559017][ T4240] vlan0: entered promiscuous mode [ 39.564142][ T4240] team0: entered promiscuous mode [ 39.569265][ T4240] team_slave_0: entered promiscuous mode [ 39.575223][ T4240] team_slave_1: entered promiscuous mode [ 39.646226][ T4250] netlink: 'syz.1.227': attribute type 27 has an invalid length. [ 39.721513][ T4261] 8021q: VLANs not supported on ipvlan1 [ 39.881355][ T4277] ipip0: entered promiscuous mode [ 39.938930][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.972530][ T4285] Illegal XDP return value 4294967294 on prog (id 90) dev syz_tun, expect packet loss! [ 40.053875][ T4300] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.062626][ T4300] EXT4-fs (loop0): invalid journal inode [ 40.068389][ T4300] EXT4-fs (loop0): can't get journal size [ 40.081887][ T4300] EXT4-fs (loop0): 1 truncate cleaned up [ 40.094211][ T4300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.121113][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.150798][ T4308] Unable to read rock-ridge attributes [ 40.160587][ T4308] Unable to read rock-ridge attributes [ 40.166644][ T4308] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 40.220872][ T4319] tipc: Started in network mode [ 40.225763][ T4319] tipc: Node identity 42d585d91376, cluster identity 4711 [ 40.232964][ T4319] tipc: Enabled bearer , priority 0 [ 40.241021][ T4319] syzkaller0: entered promiscuous mode [ 40.246535][ T4319] syzkaller0: entered allmulticast mode [ 40.254718][ T4319] tipc: Resetting bearer [ 40.264510][ T4318] tipc: Resetting bearer [ 40.285399][ T4318] tipc: Disabling bearer [ 40.410171][ T4341] bond1: invalid ARP target 0.0.0.0 specified for addition [ 40.417554][ T4341] bond1: option arp_ip_target: invalid value (0) [ 40.425082][ T4341] bond1 (unregistering): Released all slaves [ 40.524714][ T4362] netlink: 'syz.0.265': attribute type 13 has an invalid length. [ 40.533731][ T4363] x_tables: duplicate underflow at hook 2 [ 40.588610][ T4370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.614837][ T4374] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.267: corrupted inode contents [ 40.617894][ T4370] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.643636][ T4379] vlan2: entered promiscuous mode [ 40.648700][ T4379] team0: entered promiscuous mode [ 40.653783][ T4379] team_slave_0: entered promiscuous mode [ 40.659472][ T4379] team_slave_1: entered promiscuous mode [ 40.665094][ T4374] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.267: mark_inode_dirty error [ 40.677520][ T4374] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.267: corrupted inode contents [ 40.679103][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.689384][ T4374] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.267: mark_inode_dirty error [ 40.716313][ T4374] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.267: Failed to acquire dquot type 0 [ 40.728244][ T4382] program syz.3.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.737959][ T4374] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.267: corrupted inode contents [ 40.750839][ T4374] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.267: mark_inode_dirty error [ 40.766050][ T4374] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.267: corrupted inode contents [ 40.780751][ T4374] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.267: mark_inode_dirty error [ 40.792888][ T4374] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.267: corrupted inode contents [ 40.808699][ T4374] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 40.818626][ T4374] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.267: corrupted inode contents [ 40.831164][ T4374] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.267: mark_inode_dirty error [ 40.842631][ T4374] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 40.852629][ T4374] EXT4-fs (loop1): 1 truncate cleaned up [ 40.859092][ T4374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.871896][ T4374] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.904944][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.122060][ T4600] 9pnet_fd: Insufficient options for proto=fd [ 41.181269][ T4602] lo speed is unknown, defaulting to 1000 [ 41.422579][ T4617] EXT4-fs: quotafile must be on filesystem root [ 41.430787][ T4617] Invalid ELF header magic: != ELF [ 41.451341][ T4619] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 41.537570][ T4627] sctp: [Deprecated]: syz.3.284 (pid 4627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 41.537570][ T4627] Use struct sctp_sack_info instead [ 41.567863][ T4625] program syz.4.286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.577310][ T4625] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 41.614574][ T4625] msdos: Bad value for 'fmask' [ 41.651644][ T4638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.696462][ T4644] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.711982][ T4644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.724428][ T4644] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.737576][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.951946][ T4654] 9p: Could not find request transport: N4TEaÞ45t@:вj`mE?{5 [ 41.951946][ T4654]  b[xlB] [ 41.983875][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 41.998565][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 42.011297][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.011297][ T12] [ 42.063806][ T271] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 42.076674][ T271] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.076674][ T271] [ 42.086383][ T271] EXT4-fs (loop0): Total free blocks count 0 [ 42.092422][ T271] EXT4-fs (loop0): Free/Dirty block details [ 42.098348][ T271] EXT4-fs (loop0): free_blocks=0 [ 42.103376][ T271] EXT4-fs (loop0): dirty_blocks=2048 [ 42.108849][ T271] EXT4-fs (loop0): Block reservation details [ 42.569624][ T4685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.581973][ T4685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.766482][ T4689] dummy0: entered promiscuous mode [ 42.772018][ T4689] macsec1: entered promiscuous mode [ 42.777401][ T4689] macsec1: entered allmulticast mode [ 42.782741][ T4689] dummy0: entered allmulticast mode [ 42.789208][ T4689] dummy0: left allmulticast mode [ 42.794336][ T4689] dummy0: left promiscuous mode [ 42.818399][ T4690] set_capacity_and_notify: 14 callbacks suppressed [ 42.818419][ T4690] loop4: detected capacity change from 0 to 512 [ 42.834849][ T4690] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.851066][ T4690] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.865658][ T4690] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.306: Allocating blocks 41-42 which overlap fs metadata [ 42.880163][ T4690] __quota_error: 432 callbacks suppressed [ 42.880210][ T4690] Quota error (device loop4): write_blk: dquota write failed [ 42.893514][ T4690] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 42.903153][ T4690] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.306: Allocating blocks 41-42 which overlap fs metadata [ 42.917379][ T4690] Quota error (device loop4): write_blk: dquota write failed [ 42.925168][ T4690] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 42.935565][ T4690] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.306: Failed to acquire dquot type 1 [ 42.947930][ T4690] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 42.962660][ T4690] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.306: corrupted inode contents [ 42.974996][ T4690] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.306: mark_inode_dirty error [ 42.986917][ T4690] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.306: corrupted inode contents [ 42.999717][ T4690] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.306: mark_inode_dirty error [ 43.012029][ T4690] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.306: corrupted inode contents [ 43.024270][ T4690] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 43.033398][ T4690] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.306: corrupted inode contents [ 43.045410][ T29] audit: type=1400 audit(1769329815.024:811): avc: denied { listen } for pid=4692 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.089130][ T4690] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.306: mark_inode_dirty error [ 43.110954][ T4690] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 43.129004][ T4690] EXT4-fs (loop4): 1 truncate cleaned up [ 43.141146][ T4690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.196261][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.253884][ T4717] loop3: detected capacity change from 0 to 512 [ 43.268344][ T4717] EXT4-fs: Ignoring removed nobh option [ 43.282502][ T29] audit: type=1400 audit(1769329815.264:812): avc: denied { lock } for pid=4712 comm="syz.4.313" path="socket:[8563]" dev="sockfs" ino=8563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.327312][ T4721] lo speed is unknown, defaulting to 1000 [ 43.393996][ T4730] __nla_validate_parse: 19 callbacks suppressed [ 43.394010][ T4730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'. [ 43.424987][ T4717] ------------[ cut here ]------------ [ 43.430512][ T4717] EA inode 11 i_nlink=1026 [ 43.430590][ T4717] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.315/4717 [ 43.445673][ T4717] Modules linked in: [ 43.449570][ T4717] CPU: 0 UID: 0 PID: 4717 Comm: syz.3.315 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.459312][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.469457][ T4717] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 43.476104][ T4717] Code: c4 cd 9b ff 4c 8d 2d ed 99 3f 05 49 8d 7e 40 e8 c4 7f b7 ff 49 8b 6e 40 4c 89 e7 e8 f8 7a b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 4b c5 03 66 66 66 66 66 66 2e [ 43.495811][ T4717] RSP: 0018:ffffc900012cf5a8 EFLAGS: 00010246 [ 43.501929][ T4717] RAX: ffff8881366add10 RBX: ffff8881079fe080 RCX: ffffffff81bc7708 [ 43.509924][ T4717] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc10e0 [ 43.517993][ T4717] RBP: 000000000000000b R08: 00018881079fe033 R09: 0000000000000000 [ 43.526077][ T4717] R10: ffffc900012cf4d8 R11: 0001c900012cf4d8 R12: ffff8881079fe030 [ 43.534157][ T4717] R13: ffffffff86fc10e0 R14: ffff8881079fdfe8 R15: 0000000000000001 [ 43.542155][ T4717] FS: 00007efc176c76c0(0000) GS:ffff8882aeb7c000(0000) knlGS:0000000000000000 [ 43.551210][ T4717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.557877][ T4717] CR2: 00007ffca04f60c8 CR3: 000000011b35e000 CR4: 00000000003506f0 [ 43.565943][ T4717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.574049][ T4717] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 43.582092][ T4717] Call Trace: [ 43.585367][ T4717] [ 43.588302][ T4717] ext4_xattr_set_entry+0x77c/0x1010 [ 43.593713][ T4717] ext4_xattr_ibody_set+0x184/0x3c0 [ 43.598949][ T4717] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 43.604915][ T4717] __ext4_expand_extra_isize+0x246/0x280 [ 43.610593][ T4717] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 43.616086][ T4717] ext4_evict_inode+0x7c3/0xd40 [ 43.621100][ T4717] ? __pfx_ext4_evict_inode+0x10/0x10 [ 43.626490][ T4717] evict+0x2af/0x510 [ 43.630438][ T4717] ? __dquot_initialize+0x146/0x7c0 [ 43.635657][ T4717] iput+0x4b9/0x650 [ 43.639470][ T4717] ext4_process_orphan+0x1a9/0x1c0 [ 43.644661][ T4717] ext4_orphan_cleanup+0x6a8/0xa00 [ 43.649790][ T4717] ext4_fill_super+0x3476/0x3800 [ 43.654768][ T4717] ? set_blocksize+0x1a3/0x310 [ 43.659540][ T4717] ? setup_bdev_super+0x30e/0x370 [ 43.664622][ T4717] ? __pfx_ext4_fill_super+0x10/0x10 [ 43.669920][ T4717] get_tree_bdev_flags+0x291/0x300 [ 43.675092][ T4717] ? __pfx_ext4_fill_super+0x10/0x10 [ 43.680496][ T4717] get_tree_bdev+0x1f/0x30 [ 43.684974][ T4717] ext4_get_tree+0x1c/0x30 [ 43.689393][ T4717] vfs_get_tree+0x57/0x1d0 [ 43.693929][ T4717] do_new_mount+0x288/0x700 [ 43.698444][ T4717] path_mount+0x4c0/0xb90 [ 43.702817][ T4717] ? user_path_at+0xbf/0x130 [ 43.707530][ T4717] __se_sys_mount+0x28c/0x2e0 [ 43.712296][ T4717] __x64_sys_mount+0x67/0x80 [ 43.716905][ T4717] x64_sys_call+0x2cca/0x3000 [ 43.721661][ T4717] do_syscall_64+0xc0/0x2a0 [ 43.726239][ T4717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.732232][ T4717] RIP: 0033:0x7efc18c6bf4a [ 43.736676][ T4717] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.756322][ T4717] RSP: 002b:00007efc176c6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.764768][ T4717] RAX: ffffffffffffffda RBX: 00007efc176c6ee0 RCX: 00007efc18c6bf4a [ 43.772817][ T4717] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007efc176c6ea0 [ 43.780876][ T4717] RBP: 0000200000000180 R08: 00007efc176c6ee0 R09: 0000000000800718 [ 43.788949][ T4717] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 43.797046][ T4717] R13: 00007efc176c6ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 43.805189][ T4717] [ 43.808222][ T4717] ---[ end trace 0000000000000000 ]--- [ 43.816121][ T4717] EXT4-fs (loop3): 1 orphan inode deleted [ 43.821980][ T29] audit: type=1400 audit(1769329815.804:813): avc: denied { ioctl } for pid=4731 comm="syz.1.319" path="socket:[9361]" dev="sockfs" ino=9361 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.851706][ T4730] geneve3: entered promiscuous mode [ 43.860832][ T4717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.892321][ T29] audit: type=1400 audit(1769329815.854:814): avc: denied { read } for pid=4731 comm="syz.1.319" path="socket:[9361]" dev="sockfs" ino=9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.965100][ T4749] lo speed is unknown, defaulting to 1000 [ 43.973187][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.011959][ T4754] netlink: 84 bytes leftover after parsing attributes in process `syz.3.323'. [ 44.066855][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 44.075738][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 44.101132][ T4761] random: crng reseeded on system resumption [ 44.109934][ T29] audit: type=1400 audit(1769329816.094:815): avc: denied { append } for pid=4760 comm="syz.0.326" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 44.133075][ T29] audit: type=1400 audit(1769329816.094:816): avc: denied { open } for pid=4760 comm="syz.0.326" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 44.154537][ T4759] loop2: detected capacity change from 0 to 512 [ 44.184872][ T4761] Restarting kernel threads ... [ 44.192047][ T4761] Done restarting kernel threads. [ 44.204402][ T4766] lo speed is unknown, defaulting to 1000 [ 44.209043][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 44.225683][ T4759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.254515][ T4770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.299656][ T4759] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.376015][ T4785] xt_hashlimit: size too large, truncated to 1048576 [ 44.508453][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.522167][ T4795] loop4: detected capacity change from 0 to 1024 [ 44.556408][ T4795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.631254][ T4795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.334'. [ 44.640237][ T4795] netlink: 204 bytes leftover after parsing attributes in process `syz.4.334'. [ 44.654446][ T4801] loop2: detected capacity change from 0 to 512 [ 44.666409][ T4804] binfmt_misc: register: failed to install interpreter file ./file0 [ 44.699752][ T4806] loop1: detected capacity change from 0 to 512 [ 44.706563][ T4795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.334: inode #2932010370: comm syz.4.334: iget: illegal inode # [ 44.722935][ T4795] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.334: error while reading EA inode 2932010370 err=-117 [ 44.737187][ T4801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.737335][ T4806] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 44.759123][ T4801] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.794330][ T4806] netlink: 108 bytes leftover after parsing attributes in process `syz.1.338'. [ 44.803422][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 44.823167][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.877919][ T4818] loop0: detected capacity change from 0 to 164 [ 44.888176][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.911875][ T4818] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.923019][ T4825] loop2: detected capacity change from 0 to 512 [ 44.929695][ T4825] EXT4-fs: Ignoring removed nobh option [ 44.936560][ T4825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.962699][ T4825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 44.982804][ T4825] System zones: 1-12 [ 44.987487][ T4825] EXT4-fs (loop2): 1 truncate cleaned up [ 44.993996][ T4825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.020193][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.063327][ T4839] loop1: detected capacity change from 0 to 128 [ 45.091219][ T4841] tmpfs: Bad value for 'mpol' [ 45.107086][ T4839] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.164090][ T4849] loop4: detected capacity change from 0 to 2048 [ 45.166882][ T4839] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.173505][ T4849] ext4: Unknown parameter '2in_batch_time' [ 45.197001][ T3317] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.226564][ T3317] rock: directory entry would overflow storage [ 45.232920][ T3317] rock: sig=0x4f50, size=4, remaining=3 [ 45.238463][ T3317] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 45.255693][ T4852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.282045][ T4852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.301961][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.313550][ T3317] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.335914][ T4856] delete_channel: no stack [ 45.361094][ T3317] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.389151][ T3317] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.389716][ T4861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.410335][ T3317] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.449342][ T3317] rock: directory entry would overflow storage [ 45.455631][ T3317] rock: sig=0x4f50, size=4, remaining=3 [ 45.461214][ T3317] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 45.493310][ T4875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.359'. [ 45.504800][ T4880] netlink: 'syz.4.356': attribute type 30 has an invalid length. [ 45.510506][ T3317] VFS: Lookup of '' in iso9660 loop0 would have caused loop [ 45.561010][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.571969][ T3317] VFS: Lookup of '' in iso9660 loop0 would have caused loop [ 45.599629][ T4889] EXT4-fs: inline encryption not supported [ 45.619578][ T4891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.732905][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.798602][ T4889] EXT4-fs: Ignoring removed bh option [ 45.820722][ T4889] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.836589][ T4897] 9p: Bad value for 'rfdno' [ 45.845803][ T4889] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.866335][ T4889] EXT4-fs error (device loop1): ext4_quota_enable:7177: comm syz.1.363: inode #2304: comm syz.1.363: iget: illegal inode # [ 45.881722][ T4889] EXT4-fs (loop1): Remounting filesystem read-only [ 45.888264][ T4889] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 45.960146][ T4889] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 46.049150][ T52] bridge_slave_1: left allmulticast mode [ 46.054869][ T52] bridge_slave_1: left promiscuous mode [ 46.060578][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.109486][ T4889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.181353][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.303094][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.336583][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.354205][ T52] bond0 (unregistering): Released all slaves [ 46.407414][ T52] hsr_slave_0: left promiscuous mode [ 46.407660][ T52] hsr_slave_1: left promiscuous mode [ 46.408096][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.408489][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.544075][ T4929] netlink: 'syz.1.374': attribute type 21 has an invalid length. [ 46.582454][ T52] team0 (unregistering): Port device team_slave_1 removed [ 46.611766][ T52] team0 (unregistering): Port device team_slave_0 removed [ 46.625929][ T4935] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.636860][ T4935] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.661542][ T4935] JBD2: no valid journal superblock found [ 46.667355][ T4935] EXT4-fs (loop1): Could not load journal inode [ 46.678727][ T4918] netlink: 'syz.4.371': attribute type 15 has an invalid length. [ 46.802626][ T4948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.823853][ T4916] lo speed is unknown, defaulting to 1000 [ 46.840630][ T4948] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.915076][ T4916] chnl_net:caif_netlink_parms(): no params data found [ 46.976794][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.983927][ T4916] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.992189][ T4916] bridge_slave_0: entered allmulticast mode [ 47.005819][ T4916] bridge_slave_0: entered promiscuous mode [ 47.025097][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.032393][ T4916] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.039967][ T4916] bridge_slave_1: entered allmulticast mode [ 47.046591][ T4916] bridge_slave_1: entered promiscuous mode [ 47.068947][ T4916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.079732][ T4916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.107790][ T4916] team0: Port device team_slave_0 added [ 47.114821][ T4916] team0: Port device team_slave_1 added [ 47.132275][ T4916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.139269][ T4916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.165257][ T4916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.177625][ T4916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.184692][ T4916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.210602][ T4916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.308244][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.308311][ T4916] hsr_slave_0: entered promiscuous mode [ 47.323640][ T4916] hsr_slave_1: entered promiscuous mode [ 47.329626][ T4916] debugfs: 'hsr0' already exists in 'hsr' [ 47.335458][ T4916] Cannot create hsr debugfs directory [ 47.355711][ T5011] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.414240][ T5011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 47.433843][ T5011] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.386: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.447985][ T5011] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.386: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.470650][ T5011] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.386: Failed to acquire dquot type 0 [ 47.510643][ T5011] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 47.525873][ T4916] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.535860][ T4916] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.549233][ T5011] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.386: mark_inode_dirty error [ 47.549800][ T4916] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.581466][ T4916] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.606416][ T5028] syzkaller0: entered promiscuous mode [ 47.611965][ T5028] syzkaller0: entered allmulticast mode [ 47.622721][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.629813][ T4916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.637196][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.644326][ T5011] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 47.644338][ T4916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.677515][ T5028] tipc: Started in network mode [ 47.682504][ T5028] tipc: Node identity 0e5647bd24b8, cluster identity 4711 [ 47.689660][ T5028] tipc: Enabled bearer , priority 0 [ 47.696266][ T5011] EXT4-fs (loop3): 1 orphan inode deleted [ 47.704112][ T5026] tipc: Resetting bearer [ 47.710683][ T5011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.723360][ T12] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.732934][ T5045] EXT4-fs: Ignoring removed oldalloc option [ 47.746684][ T5026] tipc: Disabling bearer [ 47.759785][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 47.778475][ T4916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.794373][ T5045] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.394: Parent and EA inode have the same ino 15 [ 47.809030][ T5011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.815585][ T4916] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.832238][ T5045] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.854336][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.862162][ T5011] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.386: Invalid inode table block 1 in block_group 0 [ 47.866054][ T5045] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.394: Parent and EA inode have the same ino 15 [ 47.887587][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.895680][ T5045] EXT4-fs (loop4): 1 orphan inode deleted [ 47.901658][ T5011] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 47.912271][ T5045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.926313][ T5011] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.386: mark_inode_dirty error [ 47.959025][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.966168][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.978877][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.979458][ T5045] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.394: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 47.986016][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.031774][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 48.031791][ T29] audit: type=1400 audit(1769329820.014:958): avc: denied { ioctl } for pid=5037 comm="syz.4.394" path=2F36342F66696C65302F233135202864656C6574656429 dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.062098][ T5076] set_capacity_and_notify: 8 callbacks suppressed [ 48.062116][ T5076] loop3: detected capacity change from 0 to 2048 [ 48.094432][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.112293][ T5076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.156267][ T5084] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 48.195069][ T29] audit: type=1400 audit(1769329820.184:959): avc: denied { execute } for pid=5086 comm="syz.2.402" path="/78/cpu.stat" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.203042][ T5084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.245623][ T4916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.255590][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.341627][ T29] audit: type=1400 audit(1769329820.334:960): avc: denied { setattr } for pid=5101 comm="syz.3.403" name="task" dev="proc" ino=10349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 48.397223][ T5122] sctp: [Deprecated]: syz.4.407 (pid 5122) Use of int in max_burst socket option. [ 48.397223][ T5122] Use struct sctp_assoc_value instead [ 48.400743][ T29] audit: type=1400 audit(1769329820.384:961): avc: denied { bind } for pid=5121 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.429817][ T5120] loop3: detected capacity change from 0 to 1024 [ 48.447641][ T5127] __nla_validate_parse: 15 callbacks suppressed [ 48.447658][ T5127] netlink: 60 bytes leftover after parsing attributes in process `syz.4.408'. [ 48.468589][ T5120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.469277][ T5127] netlink: 60 bytes leftover after parsing attributes in process `syz.4.408'. [ 48.482883][ T5120] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.504977][ T4916] veth0_vlan: entered promiscuous mode [ 48.513242][ T4916] veth1_vlan: entered promiscuous mode [ 48.513947][ T5127] loop4: detected capacity change from 0 to 512 [ 48.531468][ T4916] veth0_macvtap: entered promiscuous mode [ 48.537662][ T5127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.539734][ T4916] veth1_macvtap: entered promiscuous mode [ 48.555389][ T5120] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.406: lblock 3 mapped to illegal pblock 3 (length 3) [ 48.561591][ T4916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.572880][ T5120] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 48.580893][ T4916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.588969][ T5120] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.588969][ T5120] [ 48.600287][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.616961][ T5127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.618999][ T5120] vlan2: entered promiscuous mode [ 48.634504][ T5120] macvtap0: entered promiscuous mode [ 48.639675][ T5127] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.652646][ T271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.668425][ T29] audit: type=1400 audit(1769329820.654:962): avc: denied { mounton } for pid=4916 comm="syz-executor" path="/root/syzkaller.hF8Y1v/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 48.674564][ T271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.705920][ T2566] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 48.706934][ T271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.727655][ T2566] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 48.739955][ T29] audit: type=1400 audit(1769329820.714:963): avc: denied { append } for pid=5126 comm="syz.4.408" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.741172][ T2566] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.741172][ T2566] [ 48.802488][ T29] audit: type=1400 audit(1769329820.794:964): avc: denied { write } for pid=5133 comm="syz.1.410" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 48.827824][ T5136] netlink: 'syz.5.370': attribute type 2 has an invalid length. [ 48.832632][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.847218][ T5136] loop5: detected capacity change from 0 to 512 [ 48.858108][ T5136] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 48.864210][ T5137] bond2: entered promiscuous mode [ 48.873035][ T5137] bond2: entered allmulticast mode [ 48.878950][ T5137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.879968][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.900282][ T5137] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 48.911277][ T5137] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 48.919418][ T5136] EXT4-fs (loop5): orphan file too big: 8388608 [ 48.923114][ T5137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 48.936285][ T5136] EXT4-fs (loop5): mount failed [ 48.952000][ T5137] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 49.039154][ T5147] loop5: detected capacity change from 0 to 2048 [ 49.069122][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 49.070222][ T5147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.144315][ T5158] loop4: detected capacity change from 0 to 512 [ 49.167866][ T5154] loop3: detected capacity change from 0 to 1024 [ 49.187621][ T5158] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.188338][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.199725][ T5160] loop2: detected capacity change from 0 to 1024 [ 49.235798][ T5158] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 49.254293][ T5154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.255710][ T5158] EXT4-fs (loop4): Remounting filesystem read-only [ 49.273128][ T5158] Quota error (device loop4): write_blk: dquota write failed [ 49.280530][ T5158] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 49.289803][ T5158] Quota error (device loop4): write_blk: dquota write failed [ 49.292638][ T5160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'. [ 49.297369][ T5158] EXT4-fs (loop4): 1 truncate cleaned up [ 49.306050][ T5160] netlink: 204 bytes leftover after parsing attributes in process `syz.2.418'. [ 49.351547][ T5154] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.415: inode #218103808: comm syz.3.415: iget: illegal inode # [ 49.377246][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.417'. [ 49.386364][ T5168] 8021q: VLANs not supported on vcan0 [ 49.404410][ T5160] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.418: inode #2932010370: comm syz.2.418: iget: illegal inode # [ 49.426104][ T5154] EXT4-fs (loop3): Remounting filesystem read-only [ 49.431078][ T5160] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.418: error while reading EA inode 2932010370 err=-117 [ 49.448029][ T5154] EXT4-fs warning (device loop3): ext4_xattr_block_set:2200: inode #19: comm syz.3.415: dec ref error=-30 [ 49.463910][ T5154] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 49.495503][ T5154] SELinux: failed to load policy [ 49.532249][ T5184] loop4: detected capacity change from 0 to 1024 [ 49.558912][ T5184] EXT4-fs: Ignoring removed orlov option [ 49.578190][ T5187] SELinux: Context is not valid (left unmapped). [ 49.593142][ T5189] loop3: detected capacity change from 0 to 512 [ 49.598162][ T5184] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.422: bit already cleared for inode 15 [ 49.602037][ T5187] sg_read: process 231 (syz.2.423) changed security contexts after opening file descriptor, this is not allowed. [ 49.674519][ T5189] EXT4-fs: Mount option(s) incompatible with ext2 [ 49.742416][ T5198] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.781718][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 49.785950][ T5198] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.427: Allocating blocks 41-42 which overlap fs metadata [ 49.806795][ T5198] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.427: Failed to acquire dquot type 1 [ 49.822687][ T5198] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 49.838638][ T5198] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.427: corrupted inode contents [ 49.840118][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'. [ 49.862576][ T5214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.865501][ T5198] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.427: mark_inode_dirty error [ 49.887076][ T5214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.905578][ T5198] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.427: corrupted inode contents [ 49.917622][ T5198] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.427: mark_inode_dirty error [ 49.931059][ T5198] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.427: corrupted inode contents [ 49.949141][ T5198] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 49.958149][ T5198] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.427: corrupted inode contents [ 49.988883][ T5198] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.427: mark_inode_dirty error [ 50.012598][ T5198] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 50.025632][ T5198] EXT4-fs (loop2): 1 truncate cleaned up [ 50.095370][ T5235] netlink: 'syz.2.436': attribute type 21 has an invalid length. [ 50.106189][ T5235] EXT4-fs: Ignoring removed bh option [ 50.122514][ T5235] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.186730][ T5233] netlink: 48 bytes leftover after parsing attributes in process `syz.3.435'. [ 50.336463][ T5249] netlink: 'syz.5.438': attribute type 10 has an invalid length. [ 50.339556][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.353707][ T5249] bond0: (slave team0): Enslaving as an active interface with an up link [ 50.411842][ T5259] EXT4-fs: Ignoring removed orlov option [ 50.623175][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.632185][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.640834][ T5279] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.647130][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.701865][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.721661][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.730891][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.731199][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.731263][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.731646][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.731724][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.732007][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.732068][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.753389][ T5279] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.794477][ T271] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.905325][ T5288] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 50.975030][ T5290] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.050514][ T5290] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.450: corrupted inode contents [ 51.101370][ T5290] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #18: comm syz.3.450: mark_inode_dirty error [ 51.122199][ T5295] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.141748][ T5290] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.450: corrupted inode contents [ 51.160625][ T5290] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #18: comm syz.3.450: mark_inode_dirty error [ 51.184619][ T5290] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #18: comm syz.3.450: mark inode dirty (error -117) [ 51.219246][ T5290] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 51.307331][ T5288] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.478004][ T5330] Invalid ELF header len 10 [ 51.674129][ T5358] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 51.694082][ T5361] lo speed is unknown, defaulting to 1000 [ 51.802118][ T5288] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 3: comm syz.1.449: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 51.863699][ T5288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5288 comm=syz.1.449 [ 51.956842][ T5380] bond1: entered promiscuous mode [ 51.961944][ T5380] bond1: entered allmulticast mode [ 51.967787][ T3305] loop3: p1 < > p3 p4 < > [ 51.973983][ T3305] loop3: p3 size 33554432 extends beyond EOD, truncated [ 51.995008][ T5380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.015953][ T5371] loop3: p1 < > p3 p4 < > [ 52.021342][ T5371] loop3: p3 size 33554432 extends beyond EOD, truncated [ 52.216936][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 52.228082][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 52.247303][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 52.574022][ T5401] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.637285][ T5401] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.481: lblock 3 mapped to illegal pblock 3 (length 3) [ 52.685665][ T5419] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.692305][ T5419] EXT4-fs: Ignoring removed bh option [ 52.693638][ T5401] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 52.709990][ T5401] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.709990][ T5401] [ 52.733369][ T5399] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.481: Freeing blocks not in datazone - block = 3, count = 3 [ 52.746598][ T5419] EXT4-fs: Ignoring removed nobh option [ 52.746845][ T5399] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.481: Freeing blocks not in datazone - block = 0, count = 16 [ 52.779981][ T5419] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 52.792463][ T5419] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.792463][ T5419] [ 52.802271][ T5419] EXT4-fs (loop2): Total free blocks count 0 [ 52.808453][ T5419] EXT4-fs (loop2): Free/Dirty block details [ 52.814420][ T5419] EXT4-fs (loop2): free_blocks=0 [ 52.819353][ T5419] EXT4-fs (loop2): dirty_blocks=0 [ 52.824423][ T5419] EXT4-fs (loop2): Block reservation details [ 52.830671][ T5419] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 52.849641][ T5438] netlink: 'syz.4.490': attribute type 30 has an invalid length. [ 52.888290][ T5446] EXT4-fs: inline encryption not supported [ 52.894279][ T5446] EXT4-fs: inline encryption not supported [ 52.920157][ T5446] ext4: Unknown parameter 'prjquota.sb' [ 53.042728][ T5458] set_capacity_and_notify: 16 callbacks suppressed [ 53.042743][ T5458] loop2: detected capacity change from 0 to 512 [ 53.059661][ T5458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.066591][ T5460] loop1: detected capacity change from 0 to 512 [ 53.075110][ T5460] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.086138][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 53.086151][ T29] audit: type=1400 audit(1769329825.074:995): avc: denied { ioctl } for pid=5453 comm="syz.3.495" path="socket:[11764]" dev="sockfs" ino=11764 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 53.141181][ T5460] EXT4-fs error (device loop1): ext4_init_orphan_info:620: comm syz.1.500: orphan file block 0: bad magic [ 53.153863][ T5458] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 53.162143][ T5458] System zones: 0-2, 18-18, 34-34 [ 53.167385][ T5460] EXT4-fs (loop1): mount failed [ 53.173496][ T5458] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.191944][ T5458] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.499: bg 0: block 248: padding at end of block bitmap is not set [ 53.217860][ T5458] Quota error (device loop2): write_blk: dquota write failed [ 53.225326][ T5458] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 53.235658][ T5458] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.499: Failed to acquire dquot type 1 [ 53.251533][ T5458] EXT4-fs (loop2): 1 truncate cleaned up [ 53.269566][ T29] audit: type=1400 audit(1769329825.254:996): avc: denied { remount } for pid=5457 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.288956][ T5467] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 53.312193][ T5467] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 53.341987][ T5467] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 53.365754][ T5458] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 53.374382][ T5467] ext4 filesystem being remounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.379465][ T5467] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.499: deleted inode referenced: 12 [ 53.379985][ T5467] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 53.380088][ T5458] ext4 filesystem being remounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.415335][ T5475] loop5: detected capacity change from 0 to 512 [ 53.462099][ T5475] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.475059][ T5480] __nla_validate_parse: 12 callbacks suppressed [ 53.475072][ T5480] netlink: 84 bytes leftover after parsing attributes in process `syz.1.506'. [ 53.482220][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.504'. [ 53.535190][ T5486] netlink: 'syz.1.507': attribute type 39 has an invalid length. [ 53.597308][ T29] audit: type=1400 audit(1769329825.584:997): avc: denied { map } for pid=5485 comm="syz.1.507" path="socket:[10949]" dev="sockfs" ino=10949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 53.621760][ T5493] netlink: 'syz.1.507': attribute type 2 has an invalid length. [ 53.630198][ T29] audit: type=1400 audit(1769329825.584:998): avc: denied { read } for pid=5485 comm="syz.1.507" path="socket:[10949]" dev="sockfs" ino=10949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 53.654081][ T29] audit: type=1400 audit(1769329825.614:999): avc: denied { write } for pid=5485 comm="syz.1.507" lport=42240 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 53.678121][ T29] audit: type=1400 audit(1769329825.614:1000): avc: denied { getopt } for pid=5485 comm="syz.1.507" lport=42240 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 53.702334][ T29] audit: type=1400 audit(1769329825.614:1001): avc: denied { map } for pid=5485 comm="syz.1.507" path="pipe:[2328]" dev="pipefs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 53.725046][ T29] audit: type=1400 audit(1769329825.614:1002): avc: denied { execute } for pid=5485 comm="syz.1.507" path="pipe:[2328]" dev="pipefs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 53.983637][ T5502] loop4: detected capacity change from 0 to 128 [ 53.991964][ T5499] loop5: detected capacity change from 0 to 512 [ 54.001514][ T5502] FAT-fs (loop4): bogus number of FAT sectors [ 54.007625][ T5502] FAT-fs (loop4): Can't find a valid FAT filesystem [ 54.020740][ T5499] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 54.045367][ T5499] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.156211][ T5499] FAT-fs (loop5): FAT read failed (blocknr 128) [ 54.237555][ T5526] loop2: detected capacity change from 0 to 1024 [ 54.279944][ T5528] loop5: detected capacity change from 0 to 1024 [ 54.291311][ T5528] EXT4-fs: Ignoring removed nobh option [ 54.303497][ T5528] EXT4-fs (loop5): unsupported inode size: 16384 [ 54.309872][ T5528] EXT4-fs (loop5): blocksize: 1024 [ 54.324271][ T5526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.520'. [ 54.333319][ T5526] netlink: 204 bytes leftover after parsing attributes in process `syz.2.520'. [ 54.369875][ T5537] netlink: 'syz.5.523': attribute type 29 has an invalid length. [ 54.379354][ T5537] netlink: 'syz.5.523': attribute type 29 has an invalid length. [ 54.388079][ T5535] loop1: detected capacity change from 0 to 1024 [ 54.396020][ T5538] netlink: 500 bytes leftover after parsing attributes in process `syz.5.523'. [ 54.467131][ T5542] loop5: detected capacity change from 0 to 512 [ 54.490792][ T5542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.492389][ T5546] loop2: detected capacity change from 0 to 512 [ 54.505539][ T5542] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.526: iget: bad extended attribute block 262144 [ 54.558567][ T5542] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.526: couldn't read orphan inode 15 (err -117) [ 54.559200][ T5553] netlink: 84 bytes leftover after parsing attributes in process `syz.1.528'. [ 54.668847][ T5560] EXT4-fs: Ignoring removed orlov option [ 54.678882][ T5560] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 54.692947][ T5560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 54.701222][ T5560] System zones: 0-1, 3-12 [ 54.741951][ T5566] netlink: 'syz.5.529': attribute type 1 has an invalid length. [ 54.753430][ T5564] EXT4-fs: Ignoring removed oldalloc option [ 54.754026][ T5566] erspan1: entered allmulticast mode [ 54.765120][ T5564] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.786188][ T5564] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.795516][ T5560] bridge_slave_0: left allmulticast mode [ 54.806229][ T5560] bridge_slave_0: left promiscuous mode [ 54.812089][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.822631][ T5560] bridge_slave_1: left allmulticast mode [ 54.828309][ T5560] bridge_slave_1: left promiscuous mode [ 54.834087][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.843877][ T5560] bond0: (slave bond_slave_0): Releasing backup interface [ 54.845995][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.529'. [ 54.852473][ T5564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.531: bg 0: block 248: padding at end of block bitmap is not set [ 54.876790][ T5560] bond0: (slave bond_slave_1): Releasing backup interface [ 54.893006][ T5560] team0: Port device team_slave_0 removed [ 54.900679][ T5564] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.531: Failed to acquire dquot type 1 [ 54.902602][ T5560] team0: Port device team_slave_1 removed [ 54.930654][ T5574] Invalid ELF header len 10 [ 54.969511][ T5564] EXT4-fs (loop1): 1 truncate cleaned up [ 54.986506][ T5571] bond_slave_0: entered promiscuous mode [ 54.992234][ T5571] bond_slave_1: entered promiscuous mode [ 54.997946][ T5571] team_slave_0: entered promiscuous mode [ 55.003633][ T5571] team_slave_1: entered promiscuous mode [ 55.010599][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.050614][ T5571] macsec1: entered allmulticast mode [ 55.056006][ T5571] bond0: entered allmulticast mode [ 55.061234][ T5571] bond_slave_0: entered allmulticast mode [ 55.066949][ T5571] bond_slave_1: entered allmulticast mode [ 55.072703][ T5571] team0: entered allmulticast mode [ 55.077810][ T5571] team_slave_0: entered allmulticast mode [ 55.083668][ T5571] team_slave_1: entered allmulticast mode [ 55.116584][ T5571] bond0: left allmulticast mode [ 55.121518][ T5571] bond_slave_0: left allmulticast mode [ 55.126984][ T5571] bond_slave_1: left allmulticast mode [ 55.132529][ T5571] team0: left allmulticast mode [ 55.137376][ T5571] team_slave_0: left allmulticast mode [ 55.142882][ T5571] team_slave_1: left allmulticast mode [ 55.148414][ T5571] bond_slave_0: left promiscuous mode [ 55.153880][ T5571] bond_slave_1: left promiscuous mode [ 55.159280][ T5571] team_slave_0: left promiscuous mode [ 55.164769][ T5571] team_slave_1: left promiscuous mode [ 55.181402][ T5596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.539'. [ 55.199987][ T5596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.539'. [ 55.213236][ T5596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.244321][ T5596] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.280211][ T5603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.332452][ T5603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 55.340778][ T5603] System zones: 1-2, 4-12, 8-8 [ 55.346279][ T5603] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.541: iget: bad i_size value: 38620345925642 [ 55.359329][ T5603] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.541: couldn't read orphan inode 15 (err -117) [ 55.370087][ T5616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.536'. [ 55.425057][ T5619] Invalid ELF header len 10 [ 55.436252][ T2566] bond0: (slave bond_slave_0): interface is now down [ 55.443107][ T2566] bond0: (slave bond_slave_1): interface is now down [ 55.474331][ T2566] bond0: now running without any active interface! [ 55.520323][ T5624] lo speed is unknown, defaulting to 1000 [ 55.530817][ T5632] xfrm1: entered allmulticast mode [ 55.573388][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.592783][ T5638] macvtap1: entered promiscuous mode [ 55.601480][ T5638] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 55.608925][ T5638] team0: Device macvtap1 is already an upper device of the team interface [ 55.622943][ T5642] FAULT_INJECTION: forcing a failure. [ 55.622943][ T5642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.636239][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz.4.551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.636312][ T5642] Tainted: [W]=WARN [ 55.636319][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.636332][ T5642] Call Trace: [ 55.636339][ T5642] [ 55.636347][ T5642] __dump_stack+0x1d/0x30 [ 55.636371][ T5642] dump_stack_lvl+0x95/0xd0 [ 55.636390][ T5642] dump_stack+0x15/0x1b [ 55.636488][ T5642] should_fail_ex+0x263/0x280 [ 55.636561][ T5642] should_fail+0xb/0x20 [ 55.636579][ T5642] should_fail_usercopy+0x1a/0x20 [ 55.636630][ T5642] _copy_from_user+0x1c/0xb0 [ 55.636651][ T5642] xfrm_user_policy+0x19b/0x530 [ 55.636738][ T5642] do_ipv6_setsockopt+0x126f/0x21d0 [ 55.636768][ T5642] ? kstrtoull+0x111/0x140 [ 55.636867][ T5642] ? __rcu_read_unlock+0x4e/0x70 [ 55.636884][ T5642] ? avc_has_perm_noaudit+0xab/0x130 [ 55.636952][ T5642] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 55.637019][ T5642] ipv6_setsockopt+0x59/0x130 [ 55.637080][ T5642] sctp_setsockopt+0x116/0xe30 [ 55.637101][ T5642] sock_common_setsockopt+0x69/0x80 [ 55.637128][ T5642] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 55.637158][ T5642] __sys_setsockopt+0x184/0x200 [ 55.637183][ T5642] __x64_sys_setsockopt+0x64/0x80 [ 55.637268][ T5642] x64_sys_call+0x21d5/0x3000 [ 55.637288][ T5642] do_syscall_64+0xc0/0x2a0 [ 55.637313][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.637334][ T5642] RIP: 0033:0x7f66c5c4acb9 [ 55.637350][ T5642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.637451][ T5642] RSP: 002b:00007f66c46a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 55.637470][ T5642] RAX: ffffffffffffffda RBX: 00007f66c5ec5fa0 RCX: 00007f66c5c4acb9 [ 55.637484][ T5642] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000003 [ 55.637557][ T5642] RBP: 00007f66c46a7090 R08: 0000000000000004 R09: 0000000000000000 [ 55.637579][ T5642] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 55.637591][ T5642] R13: 00007f66c5ec6038 R14: 00007f66c5ec5fa0 R15: 00007ffddb237b68 [ 55.637607][ T5642] [ 55.659961][ T5645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.870590][ T5645] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.552: inode has both inline data and extents flags [ 55.889181][ T5645] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.552: couldn't read orphan inode 15 (err -117) [ 55.947717][ T5656] EXT4-fs: inline encryption not supported [ 55.972450][ T5656] EXT4-fs: Ignoring removed i_version option [ 55.974084][ T5658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.050666][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.060069][ T5656] EXT4-fs (loop3): 1 orphan inode deleted [ 56.072915][ T5658] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.178039][ T5676] netlink: 'syz.5.561': attribute type 20 has an invalid length. [ 56.185919][ T5676] netlink: 'syz.5.561': attribute type 21 has an invalid length. [ 56.236946][ T5683] EXT4-fs: Ignoring removed orlov option [ 56.313420][ T5698] Invalid ELF header len 10 [ 56.326957][ T3382] kernel write not supported for file bpf-prog (pid: 3382 comm: kworker/1:2) [ 56.368949][ T5707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.393907][ T5707] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.484633][ T5703] futex_wake_op: syz.4.570 tries to shift op by -1; fix this program [ 56.521960][ T5719] netlink: 'syz.2.574': attribute type 30 has an invalid length. [ 56.789799][ T3315] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 56.798515][ T3315] iso9660: Corrupted directory entry in block 1 of inode 1856 [ 56.808212][ T3315] VFS: Lookup of '' in iso9660 loop4 would have caused loop [ 56.818132][ T3315] VFS: Lookup of '' in iso9660 loop4 would have caused loop [ 57.091903][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.158937][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.169306][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 57.254001][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.264385][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 57.306643][ T5738] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 57.313271][ T5738] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.320891][ T5738] vhci_hcd vhci_hcd.0: Device attached [ 57.328296][ T5745] vhci_hcd: connection closed [ 57.328462][ T1658] vhci_hcd vhci_hcd.3: stop threads [ 57.338430][ T1658] vhci_hcd vhci_hcd.3: release socket [ 57.343851][ T1658] vhci_hcd vhci_hcd.3: disconnect device [ 57.354101][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.364505][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 57.407921][ T5751] EXT4-fs error (device loop5): ext4_xattr_set_entry:1670: inode #15: comm syz.5.585: corrupted xattr entries [ 57.421435][ T5751] EXT4-fs error (device loop5): ext4_xattr_block_set:2220: inode #15: comm syz.5.585: bad block 113 [ 57.447391][ T5741] lo speed is unknown, defaulting to 1000 [ 57.484922][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.495364][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 57.517042][ T5758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.554489][ T5758] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.722539][ T5762] lo speed is unknown, defaulting to 1000 [ 57.733752][ T5741] chnl_net:caif_netlink_parms(): no params data found [ 57.864248][ T5786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=5786 comm=syz.1.588 [ 57.895263][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.905180][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.915436][ T52] bond0 (unregistering): Released all slaves [ 57.923678][ T52] bond1 (unregistering): Released all slaves [ 57.989746][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.996856][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.009591][ T5741] bridge_slave_0: entered allmulticast mode [ 58.016954][ T5741] bridge_slave_0: entered promiscuous mode [ 58.020952][ T5805] EXT4-fs: Ignoring removed orlov option [ 58.024090][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.035758][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.044044][ T5741] bridge_slave_1: entered allmulticast mode [ 58.056022][ T5741] bridge_slave_1: entered promiscuous mode [ 58.087055][ T52] hsr_slave_0: left promiscuous mode [ 58.103533][ T5818] set_capacity_and_notify: 19 callbacks suppressed [ 58.103589][ T5818] loop2: detected capacity change from 0 to 128 [ 58.105160][ T52] hsr_slave_1: left promiscuous mode [ 58.131003][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.143278][ T52] veth1_macvtap: left promiscuous mode [ 58.149532][ T5805] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.593: bit already cleared for inode 15 [ 58.149981][ T52] veth0_macvtap: left promiscuous mode [ 58.179900][ T52] veth1_vlan: left promiscuous mode [ 58.187462][ T52] veth0_vlan: left promiscuous mode [ 58.199817][ T5827] loop2: detected capacity change from 0 to 1024 [ 58.252195][ T5827] EXT4-fs error (device loop2): ext4_xattr_set_entry:1670: inode #15: comm syz.2.596: corrupted xattr entries [ 58.264198][ T5827] EXT4-fs error (device loop2): ext4_xattr_block_set:2220: inode #15: comm syz.2.596: bad block 113 [ 58.303661][ T52] team0 (unregistering): Port device team_slave_1 removed [ 58.303941][ T5836] loop2: detected capacity change from 0 to 512 [ 58.317843][ T52] team0 (unregistering): Port device team_slave_0 removed [ 58.331639][ T5836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 58.339570][ T5836] System zones: 1-12 [ 58.344993][ T5836] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.598: invalid indirect mapped block 1819239214 (level 1) [ 58.359879][ T5836] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.598: bg 0: block 361: padding at end of block bitmap is not set [ 58.374371][ T5836] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 58.384349][ T5836] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.598: attempt to clear invalid blocks 33619980 len 1 [ 58.397996][ T5836] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.598: invalid indirect mapped block 1819239214 (level 0) [ 58.401382][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.414505][ T5836] EXT4-fs (loop2): 1 truncate cleaned up [ 58.433860][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.456003][ T5839] loop1: detected capacity change from 0 to 128 [ 58.463586][ T5741] team0: Port device team_slave_0 added [ 58.470217][ T5741] team0: Port device team_slave_1 added [ 58.489735][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.496824][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.522831][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.535462][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.542455][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.568582][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.616076][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.711912][ T5741] hsr_slave_0: entered promiscuous mode [ 58.726314][ T5866] loop1: detected capacity change from 0 to 512 [ 58.738131][ T5741] hsr_slave_1: entered promiscuous mode [ 58.743442][ T5869] EXT4-fs: Ignoring removed orlov option [ 58.755356][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 58.761167][ T5741] Cannot create hsr debugfs directory [ 58.766634][ T5869] EXT4-fs (loop2): can't enable nombcache during remount [ 58.775327][ T5866] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.795256][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 58.795271][ T29] audit: type=1400 audit(1769329830.784:1069): avc: denied { bind } for pid=5860 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.798287][ T5866] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.601: bad entry in directory: inode out of bounds - offset=0, inode=258, rec_len=2048, size=2048 fake=1 [ 58.883170][ T5884] loop3: detected capacity change from 0 to 512 [ 58.932089][ T29] audit: type=1400 audit(1769329830.924:1070): avc: denied { bind } for pid=5891 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.951384][ T29] audit: type=1400 audit(1769329830.924:1071): avc: denied { name_bind } for pid=5891 comm="syz.1.607" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 58.972099][ T29] audit: type=1400 audit(1769329830.924:1072): avc: denied { node_bind } for pid=5891 comm="syz.1.607" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 58.997774][ T5893] loop1: detected capacity change from 0 to 512 [ 59.004642][ T5884] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.037202][ T5741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.073573][ T5884] EXT4-fs (loop3): 1 truncate cleaned up [ 59.093972][ T5741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.150033][ T5741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.161169][ T5741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.170967][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.179215][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.204856][ T5917] loop3: detected capacity change from 0 to 128 [ 59.327215][ T5914] loop5: detected capacity change from 0 to 512 [ 59.346465][ T5914] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.381175][ T5928] netlink: 'syz.2.611': attribute type 3 has an invalid length. [ 59.403080][ T5927] loop3: detected capacity change from 0 to 128 [ 59.403886][ T5931] __nla_validate_parse: 20 callbacks suppressed [ 59.403972][ T5931] netlink: 84 bytes leftover after parsing attributes in process `syz.1.613'. [ 59.425762][ T5914] EXT4-fs (loop5): 1 truncate cleaned up [ 59.442029][ T5927] FAT-fs (loop3): invalid media value (0x00) [ 59.448064][ T5927] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 59.455429][ T5914] netlink: 76 bytes leftover after parsing attributes in process `syz.5.609'. [ 59.457464][ T5927] FAT-fs (loop3): Can't find a valid FAT filesystem [ 59.463847][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.496349][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.499655][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.499760][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.520886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.520918][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.587941][ T5947] geneve2: entered promiscuous mode [ 59.614785][ T5947] geneve2: entered allmulticast mode [ 59.727067][ T29] audit: type=1400 audit(1769329831.714:1073): avc: denied { checkpoint_restore } for pid=5970 comm="syz.1.622" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.728979][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.773251][ T5972] EXT4-fs: Ignoring removed orlov option [ 59.814958][ T5972] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.620: bit already cleared for inode 15 [ 59.826186][ T29] audit: type=1400 audit(1769329831.804:1074): avc: denied { rename } for pid=5971 comm="syz.5.620" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.848559][ T29] audit: type=1400 audit(1769329831.804:1075): avc: denied { unlink } for pid=5971 comm="syz.5.620" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.896097][ T5999] EXT4-fs: inline encryption not supported [ 59.956270][ T29] audit: type=1400 audit(1769329831.944:1076): avc: denied { read write } for pid=5998 comm="syz.3.626" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.978938][ T29] audit: type=1400 audit(1769329831.944:1077): avc: denied { open } for pid=5998 comm="syz.3.626" path="/127/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.003004][ T5999] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 60.018507][ T5741] veth0_vlan: entered promiscuous mode [ 60.023095][ T6007] EXT4-fs: Ignoring removed orlov option [ 60.027338][ T5741] veth1_vlan: entered promiscuous mode [ 60.041865][ T6020] netlink: 56 bytes leftover after parsing attributes in process `syz.3.626'. [ 60.050497][ T5999] EXT4-fs (loop3): Remounting filesystem read-only [ 60.063281][ T5741] veth0_macvtap: entered promiscuous mode [ 60.076435][ T5741] veth1_macvtap: entered promiscuous mode [ 60.087346][ T6007] FAULT_INJECTION: forcing a failure. [ 60.087346][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 60.100050][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.5.628 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.100114][ T6007] Tainted: [W]=WARN [ 60.100121][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.100134][ T6007] Call Trace: [ 60.100149][ T6007] [ 60.100156][ T6007] __dump_stack+0x1d/0x30 [ 60.100177][ T6007] dump_stack_lvl+0x95/0xd0 [ 60.100195][ T6007] dump_stack+0x15/0x1b [ 60.100211][ T6007] should_fail_ex+0x263/0x280 [ 60.100242][ T6007] should_failslab+0x8c/0xb0 [ 60.100278][ T6007] __kmalloc_noprof+0xb8/0x580 [ 60.100299][ T6007] ? ext4_find_extent+0x16b/0x7a0 [ 60.100324][ T6007] ext4_find_extent+0x16b/0x7a0 [ 60.100348][ T6007] ext4_ext_map_blocks+0x128/0x38a0 [ 60.100447][ T6007] ? should_fail_ex+0x30/0x280 [ 60.100546][ T6007] ? should_failslab+0x8c/0xb0 [ 60.100564][ T6007] ? radix_tree_node_alloc+0x148/0x1f0 [ 60.100587][ T6007] ? radix_tree_node_alloc+0xfd/0x1f0 [ 60.100609][ T6007] ? delete_node+0x176/0x5e0 [ 60.100648][ T6007] ? __list_del_entry_valid_or_report+0x65/0x130 [ 60.100753][ T6007] ? radix_tree_iter_tag_clear+0x105/0x180 [ 60.100790][ T6007] ext4_map_query_blocks+0xae/0x550 [ 60.100871][ T6007] ? ext4_es_lookup_extent+0x3ac/0x540 [ 60.100903][ T6007] ext4_map_blocks+0x398/0xd70 [ 60.101025][ T6007] ? __account_obj_stock+0x2cc/0x350 [ 60.101043][ T6007] ext4_getblk+0x128/0x530 [ 60.101123][ T6007] ext4_bread_batch+0x5c/0x320 [ 60.101161][ T6007] __ext4_find_entry+0x852/0xdf0 [ 60.101183][ T6007] ? __d_alloc+0x37/0x340 [ 60.101227][ T6007] ? d_alloc_parallel+0xc01/0xce0 [ 60.101256][ T6007] ext4_lookup+0xcd/0x3a0 [ 60.101281][ T6007] __lookup_slow+0x19d/0x260 [ 60.101357][ T6007] lookup_slow+0x3c/0x60 [ 60.101377][ T6007] link_path_walk+0x946/0xe30 [ 60.101403][ T6007] __filename_parentat+0x1a4/0x450 [ 60.101507][ T6007] do_renameat2+0x140/0x850 [ 60.101528][ T6007] ? should_fail_ex+0xd9/0x280 [ 60.101548][ T6007] ? should_fail_ex+0xd9/0x280 [ 60.101603][ T6007] __x64_sys_rename+0x58/0x70 [ 60.101623][ T6007] x64_sys_call+0x24e/0x3000 [ 60.101694][ T6007] do_syscall_64+0xc0/0x2a0 [ 60.101730][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.101813][ T6007] RIP: 0033:0x7fd855fcacb9 [ 60.101827][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.101844][ T6007] RSP: 002b:00007fd854a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 60.101934][ T6007] RAX: ffffffffffffffda RBX: 00007fd856245fa0 RCX: 00007fd855fcacb9 [ 60.101949][ T6007] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 60.101964][ T6007] RBP: 00007fd854a27090 R08: 0000000000000000 R09: 0000000000000000 [ 60.102005][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.102018][ T6007] R13: 00007fd856246038 R14: 00007fd856245fa0 R15: 00007ffd2dea5068 [ 60.102036][ T6007] [ 60.396289][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.410762][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.422243][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.443187][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.452290][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.460846][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.504987][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.524549][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 60.545244][ T29] audit: type=1400 audit(1769329832.524:1078): avc: denied { mount } for pid=5741 comm="syz-executor" name="/" dev="gadgetfs" ino=4420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.568912][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.5.631'. [ 60.577036][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.591224][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.5.631'. [ 60.602475][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.611801][ T6042] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 60.796769][ T6031] No such timeout policy "syz1" [ 60.927255][ T6064] 9p: Bad value for 'wfdno' [ 61.008216][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.023717][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.040748][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.058547][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.069808][ T6075] sctp: [Deprecated]: syz.1.637 (pid 6075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.069808][ T6075] Use struct sctp_sack_info instead [ 61.093021][ T6081] EXT4-fs: Ignoring removed orlov option [ 61.169665][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.188048][ T6081] FAULT_INJECTION: forcing a failure. [ 61.188048][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 61.200827][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.6.641 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.200956][ T6081] Tainted: [W]=WARN [ 61.200962][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.200994][ T6081] Call Trace: [ 61.201000][ T6081] [ 61.201008][ T6081] __dump_stack+0x1d/0x30 [ 61.201100][ T6081] dump_stack_lvl+0x95/0xd0 [ 61.201120][ T6081] dump_stack+0x15/0x1b [ 61.201298][ T6081] should_fail_ex+0x263/0x280 [ 61.201315][ T6081] should_failslab+0x8c/0xb0 [ 61.201333][ T6081] kmem_cache_alloc_noprof+0x68/0x490 [ 61.201354][ T6081] ? __es_insert_extent+0x508/0xee0 [ 61.201427][ T6081] __es_insert_extent+0x508/0xee0 [ 61.201550][ T6081] ? __rmqueue_pcplist+0xb40/0xb80 [ 61.201570][ T6081] ? get_page_from_freelist+0x13a5/0x1400 [ 61.201592][ T6081] ext4_es_cache_extent+0x28d/0x390 [ 61.201617][ T6081] ext4_find_extent+0x336/0x7a0 [ 61.201712][ T6081] ext4_ext_map_blocks+0x128/0x38a0 [ 61.201736][ T6081] ? __alloc_frozen_pages_noprof+0x161/0x350 [ 61.201761][ T6081] ? alloc_pages_mpol+0x217/0x260 [ 61.201787][ T6081] ? delete_node+0x176/0x5e0 [ 61.201808][ T6081] ? radix_tree_iter_tag_clear+0x105/0x180 [ 61.201832][ T6081] ext4_map_query_blocks+0xae/0x550 [ 61.201926][ T6081] ? ext4_es_lookup_extent+0x3ac/0x540 [ 61.201957][ T6081] ext4_map_blocks+0x398/0xd70 [ 61.201982][ T6081] ? xa_load+0xb1/0xe0 [ 61.202003][ T6081] ? __account_obj_stock+0x211/0x350 [ 61.202055][ T6081] ext4_getblk+0x128/0x530 [ 61.202084][ T6081] ext4_bread_batch+0x5c/0x320 [ 61.202127][ T6081] __ext4_find_entry+0x852/0xdf0 [ 61.202183][ T6081] ? __d_alloc+0x37/0x340 [ 61.202212][ T6081] ? d_alloc_parallel+0xc01/0xce0 [ 61.202242][ T6081] ext4_lookup+0xcd/0x3a0 [ 61.202326][ T6081] __lookup_slow+0x19d/0x260 [ 61.202424][ T6081] lookup_slow+0x3c/0x60 [ 61.202453][ T6081] link_path_walk+0x946/0xe30 [ 61.202482][ T6081] __filename_parentat+0x1a4/0x450 [ 61.202549][ T6081] do_renameat2+0x140/0x850 [ 61.202567][ T6081] ? getname_flags+0x7f/0x3b0 [ 61.202585][ T6081] ? should_fail_ex+0xd9/0x280 [ 61.202608][ T6081] __x64_sys_rename+0x58/0x70 [ 61.202647][ T6081] x64_sys_call+0x24e/0x3000 [ 61.202670][ T6081] do_syscall_64+0xc0/0x2a0 [ 61.202712][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.202731][ T6081] RIP: 0033:0x7fb7e974acb9 [ 61.202758][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.202773][ T6081] RSP: 002b:00007fb7e81a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 61.202793][ T6081] RAX: ffffffffffffffda RBX: 00007fb7e99c5fa0 RCX: 00007fb7e974acb9 [ 61.202806][ T6081] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 61.202819][ T6081] RBP: 00007fb7e81a7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.202893][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.202906][ T6081] R13: 00007fb7e99c6038 R14: 00007fb7e99c5fa0 R15: 00007ffd4b27fe68 [ 61.202923][ T6081] [ 61.204001][ T6081] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.641: bit already cleared for inode 15 [ 61.644311][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 61.664252][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 61.730521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.921983][ T6114] bond3: entered promiscuous mode [ 61.927051][ T6114] bond3: entered allmulticast mode [ 61.933756][ T6114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.957320][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.049793][ T6129] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 62.068717][ T6131] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 62.079086][ T6132] EXT4-fs: Ignoring removed orlov option [ 62.092661][ T6132] FAULT_INJECTION: forcing a failure. [ 62.092661][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 62.105365][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.3.652 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.105426][ T6132] Tainted: [W]=WARN [ 62.105433][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.105445][ T6132] Call Trace: [ 62.105452][ T6132] [ 62.105460][ T6132] __dump_stack+0x1d/0x30 [ 62.105484][ T6132] dump_stack_lvl+0x95/0xd0 [ 62.105537][ T6132] dump_stack+0x15/0x1b [ 62.105556][ T6132] should_fail_ex+0x263/0x280 [ 62.105578][ T6132] should_failslab+0x8c/0xb0 [ 62.105654][ T6132] kmem_cache_alloc_noprof+0x68/0x490 [ 62.105753][ T6132] ? __es_insert_extent+0x508/0xee0 [ 62.105779][ T6132] __es_insert_extent+0x508/0xee0 [ 62.105807][ T6132] ext4_es_insert_extent+0x467/0x1c70 [ 62.105839][ T6132] ext4_map_query_blocks+0x38e/0x550 [ 62.105863][ T6132] ? ext4_es_lookup_extent+0x3ac/0x540 [ 62.105888][ T6132] ext4_map_blocks+0x398/0xd70 [ 62.105990][ T6132] ? xa_load+0xb1/0xe0 [ 62.106014][ T6132] ? __account_obj_stock+0x211/0x350 [ 62.106111][ T6132] ext4_getblk+0x128/0x530 [ 62.106137][ T6132] ext4_bread_batch+0x5c/0x320 [ 62.106168][ T6132] __ext4_find_entry+0x852/0xdf0 [ 62.106193][ T6132] ? __d_alloc+0x37/0x340 [ 62.106218][ T6132] ? d_alloc_parallel+0xc01/0xce0 [ 62.106303][ T6132] ext4_lookup+0xcd/0x3a0 [ 62.106343][ T6132] __lookup_slow+0x19d/0x260 [ 62.106370][ T6132] lookup_slow+0x3c/0x60 [ 62.106440][ T6132] link_path_walk+0x946/0xe30 [ 62.106541][ T6132] __filename_parentat+0x1a4/0x450 [ 62.106570][ T6132] do_renameat2+0x140/0x850 [ 62.106589][ T6132] ? should_fail_ex+0xd9/0x280 [ 62.106608][ T6132] ? should_fail_ex+0xd9/0x280 [ 62.106651][ T6132] __x64_sys_rename+0x58/0x70 [ 62.106671][ T6132] x64_sys_call+0x24e/0x3000 [ 62.106695][ T6132] do_syscall_64+0xc0/0x2a0 [ 62.106721][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.106763][ T6132] RIP: 0033:0x7efc18c6acb9 [ 62.106777][ T6132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.106824][ T6132] RSP: 002b:00007efc176c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 62.106844][ T6132] RAX: ffffffffffffffda RBX: 00007efc18ee5fa0 RCX: 00007efc18c6acb9 [ 62.106858][ T6132] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 62.106871][ T6132] RBP: 00007efc176c7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.106966][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.106979][ T6132] R13: 00007efc18ee6038 R14: 00007efc18ee5fa0 R15: 00007fff53c48658 [ 62.106996][ T6132] [ 62.366521][ T6132] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.652: bit already cleared for inode 15 [ 62.417844][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.654'. [ 62.435979][ T6142] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 62.452020][ T6129] netlink: 136 bytes leftover after parsing attributes in process `syz.6.651'. [ 62.461063][ T6129] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 62.494511][ T6155] netlink: 'syz.3.655': attribute type 30 has an invalid length. [ 62.545492][ T6155] bond2: option arp_missed_max: invalid value (0) [ 62.552025][ T6155] bond2: option arp_missed_max: allowed values 1 - 255 [ 62.567018][ T6155] bond2 (unregistering): Released all slaves [ 62.576754][ T6163] EXT4-fs: Ignoring removed bh option [ 62.582528][ T6163] EXT4-fs: Ignoring removed nobh option [ 62.634970][ T6170] bond2: entered promiscuous mode [ 62.640148][ T6170] bond2: entered allmulticast mode [ 62.649254][ T6170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.787263][ T6204] EXT4-fs: Ignoring removed orlov option [ 62.804701][ T6204] FAULT_INJECTION: forcing a failure. [ 62.804701][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 62.817511][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.6.665 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.817559][ T6204] Tainted: [W]=WARN [ 62.817566][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.817576][ T6204] Call Trace: [ 62.817582][ T6204] [ 62.817589][ T6204] __dump_stack+0x1d/0x30 [ 62.817613][ T6204] dump_stack_lvl+0x95/0xd0 [ 62.817635][ T6204] dump_stack+0x15/0x1b [ 62.817654][ T6204] should_fail_ex+0x263/0x280 [ 62.817755][ T6204] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 62.817812][ T6204] should_failslab+0x8c/0xb0 [ 62.817834][ T6204] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 62.817878][ T6204] ? ext4_alloc_inode+0x38/0x320 [ 62.817902][ T6204] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 62.817924][ T6204] ext4_alloc_inode+0x38/0x320 [ 62.817959][ T6204] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 62.818032][ T6204] alloc_inode+0x40/0x170 [ 62.818065][ T6204] iget_locked+0x101/0x440 [ 62.818090][ T6204] __ext4_iget+0x152/0x2350 [ 62.818127][ T6204] ext4_lookup+0x173/0x3a0 [ 62.818169][ T6204] __lookup_slow+0x19d/0x260 [ 62.818235][ T6204] lookup_slow+0x3c/0x60 [ 62.818319][ T6204] link_path_walk+0x946/0xe30 [ 62.818348][ T6204] __filename_parentat+0x1a4/0x450 [ 62.818385][ T6204] do_renameat2+0x140/0x850 [ 62.818407][ T6204] ? should_fail_ex+0xd9/0x280 [ 62.818443][ T6204] ? should_fail_ex+0xd9/0x280 [ 62.818469][ T6204] __x64_sys_rename+0x58/0x70 [ 62.818491][ T6204] x64_sys_call+0x24e/0x3000 [ 62.818571][ T6204] do_syscall_64+0xc0/0x2a0 [ 62.818599][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.818621][ T6204] RIP: 0033:0x7fb7e974acb9 [ 62.818638][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.818656][ T6204] RSP: 002b:00007fb7e81a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 62.818755][ T6204] RAX: ffffffffffffffda RBX: 00007fb7e99c5fa0 RCX: 00007fb7e974acb9 [ 62.818770][ T6204] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 62.818803][ T6204] RBP: 00007fb7e81a7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.818816][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.818828][ T6204] R13: 00007fb7e99c6038 R14: 00007fb7e99c5fa0 R15: 00007ffd4b27fe68 [ 62.818847][ T6204] [ 63.050372][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.106855][ T6213] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.671: invalid indirect mapped block 256 (level 2) [ 63.135298][ T6213] EXT4-fs (loop1): 2 truncates cleaned up [ 63.171036][ T6219] set_capacity_and_notify: 11 callbacks suppressed [ 63.171112][ T6219] loop3: detected capacity change from 0 to 512 [ 63.212107][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.224677][ T6235] syzkaller0: entered promiscuous mode [ 63.230190][ T6235] syzkaller0: entered allmulticast mode [ 63.236797][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.243382][ T6219] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.277495][ T6246] 9p: Bad value for 'rfdno' [ 63.374137][ T6259] loop1: detected capacity change from 0 to 256 [ 63.382953][ T6255] loop6: detected capacity change from 0 to 1024 [ 63.392080][ T6255] EXT4-fs: Ignoring removed bh option [ 63.401723][ T6255] EXT4-fs: Ignoring removed nobh option [ 63.418379][ T6268] loop3: detected capacity change from 0 to 1024 [ 63.433227][ T6255] 9p: Bad value for 'rfdno' [ 63.437975][ T6259] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.459790][ T6268] EXT4-fs: Ignoring removed orlov option [ 63.472072][ T6259] vhci_hcd vhci_hcd.2: invalid port number 96 [ 63.478525][ T6259] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 63.511133][ T6268] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.681: bit already cleared for inode 15 [ 63.541485][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42565 sclass=netlink_route_socket pid=6279 comm=syz.2.684 [ 63.547922][ T6278] 9p: Bad value for 'wfdno' [ 63.634154][ T6298] loop3: detected capacity change from 0 to 1024 [ 63.651299][ T6298] EXT4-fs: Ignoring removed orlov option [ 63.667003][ T6303] loop6: detected capacity change from 0 to 128 [ 63.693263][ T6298] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.687: bit already cleared for inode 15 [ 63.815060][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 63.815077][ T29] audit: type=1326 audit(1769329835.804:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 63.906101][ T29] audit: type=1326 audit(1769329835.824:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc96b86b58e code=0x7ffc0000 [ 63.929877][ T29] audit: type=1326 audit(1769329835.834:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 63.935640][ T6328] loop5: detected capacity change from 0 to 512 [ 63.953199][ T29] audit: type=1326 audit(1769329835.844:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 63.953226][ T29] audit: type=1326 audit(1769329835.844:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 63.953278][ T29] audit: type=1326 audit(1769329835.874:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 63.953312][ T29] audit: type=1326 audit(1769329835.884:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 64.036630][ T29] audit: type=1326 audit(1769329835.924:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 64.076294][ T29] audit: type=1326 audit(1769329836.014:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 64.099664][ T29] audit: type=1326 audit(1769329836.014:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96b8aacb9 code=0x7ffc0000 [ 64.141327][ T6328] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 64.149433][ T6328] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.158496][ T6332] loop1: detected capacity change from 0 to 1024 [ 64.166291][ T6328] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.696: corrupted inode contents [ 64.178289][ T6328] EXT4-fs (loop5): Remounting filesystem read-only [ 64.194213][ T6332] EXT4-fs: Ignoring removed bh option [ 64.199818][ T6332] EXT4-fs: Ignoring removed nobh option [ 64.205963][ T6328] EXT4-fs (loop5): 1 truncate cleaned up [ 64.212391][ T2566] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.222959][ T2566] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.235193][ T2566] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.310572][ T6348] loop2: detected capacity change from 0 to 256 [ 64.345781][ T6350] bond4: entered promiscuous mode [ 64.350914][ T6350] bond4: entered allmulticast mode [ 64.356284][ T6350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 64.373518][ T6348] lo speed is unknown, defaulting to 1000 [ 64.432561][ T6357] loop1: detected capacity change from 0 to 128 [ 64.472512][ T6357] Invalid ELF header len 10 [ 64.661915][ T6374] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.673627][ T6374] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.687127][ T6374] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 64.699479][ T6374] EXT4-fs (loop6): This should not happen!! Data will be lost [ 64.699479][ T6374] [ 64.712927][ T6374] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.727168][ T6374] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.710: bg 0: block 112: padding at end of block bitmap is not set [ 64.741781][ T6374] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 117 [ 64.754303][ T6374] EXT4-fs (loop6): This should not happen!! Data will be lost [ 64.754303][ T6374] [ 64.764941][ T6377] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz.6.710: directory missing '..' [ 64.779020][ T6374] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.796199][ T6374] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.809925][ T6374] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.824520][ T6374] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.837968][ T6377] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.853581][ T6377] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.867143][ T6377] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.876590][ T6382] EXT4-fs: Ignoring removed bh option [ 64.885934][ T6382] EXT4-fs: Ignoring removed nobh option [ 64.931819][ T6386] FAULT_INJECTION: forcing a failure. [ 64.931819][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.945044][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.5.713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.945123][ T6386] Tainted: [W]=WARN [ 64.945129][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.945139][ T6386] Call Trace: [ 64.945146][ T6386] [ 64.945155][ T6386] __dump_stack+0x1d/0x30 [ 64.945179][ T6386] dump_stack_lvl+0x95/0xd0 [ 64.945197][ T6386] dump_stack+0x15/0x1b [ 64.945213][ T6386] should_fail_ex+0x263/0x280 [ 64.945311][ T6386] should_fail+0xb/0x20 [ 64.945330][ T6386] should_fail_usercopy+0x1a/0x20 [ 64.945362][ T6386] _copy_from_user+0x1c/0xb0 [ 64.945442][ T6386] ___sys_sendmsg+0xc1/0x1e0 [ 64.945545][ T6386] __x64_sys_sendmsg+0xd4/0x160 [ 64.945641][ T6386] x64_sys_call+0x17ba/0x3000 [ 64.945663][ T6386] do_syscall_64+0xc0/0x2a0 [ 64.945691][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.945713][ T6386] RIP: 0033:0x7fd855fcacb9 [ 64.945732][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.945750][ T6386] RSP: 002b:00007fd854a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.945770][ T6386] RAX: ffffffffffffffda RBX: 00007fd856245fa0 RCX: 00007fd855fcacb9 [ 64.945783][ T6386] RDX: 0000000000008000 RSI: 0000200000000500 RDI: 0000000000000004 [ 64.945796][ T6386] RBP: 00007fd854a27090 R08: 0000000000000000 R09: 0000000000000000 [ 64.945856][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.945867][ T6386] R13: 00007fd856246038 R14: 00007fd856245fa0 R15: 00007ffd2dea5068 [ 64.945885][ T6386] [ 65.136829][ T6390] Invalid ELF header len 10 [ 65.162406][ T6392] __nla_validate_parse: 7 callbacks suppressed [ 65.162423][ T6392] netlink: 84 bytes leftover after parsing attributes in process `syz.3.716'. [ 65.220906][ T6394] EXT4-fs: Ignoring removed orlov option [ 65.262204][ T6394] FAULT_INJECTION: forcing a failure. [ 65.262204][ T6394] name failslab, interval 1, probability 0, space 0, times 0 [ 65.274859][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.5.717 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.274936][ T6394] Tainted: [W]=WARN [ 65.274943][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.274956][ T6394] Call Trace: [ 65.274963][ T6394] [ 65.274970][ T6394] __dump_stack+0x1d/0x30 [ 65.275016][ T6394] dump_stack_lvl+0x95/0xd0 [ 65.275100][ T6394] dump_stack+0x15/0x1b [ 65.275117][ T6394] should_fail_ex+0x263/0x280 [ 65.275135][ T6394] should_failslab+0x8c/0xb0 [ 65.275154][ T6394] kmem_cache_alloc_noprof+0x68/0x490 [ 65.275175][ T6394] ? security_inode_alloc+0x37/0x100 [ 65.275256][ T6394] security_inode_alloc+0x37/0x100 [ 65.275276][ T6394] inode_init_always_gfp+0x4b7/0x500 [ 65.275297][ T6394] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 65.275343][ T6394] alloc_inode+0x58/0x170 [ 65.275391][ T6394] iget_locked+0x101/0x440 [ 65.275410][ T6394] __ext4_iget+0x152/0x2350 [ 65.275446][ T6394] ext4_lookup+0x173/0x3a0 [ 65.275511][ T6394] __lookup_slow+0x19d/0x260 [ 65.275540][ T6394] lookup_slow+0x3c/0x60 [ 65.275563][ T6394] link_path_walk+0x946/0xe30 [ 65.275589][ T6394] __filename_parentat+0x1a4/0x450 [ 65.275696][ T6394] do_renameat2+0x140/0x850 [ 65.275714][ T6394] ? should_fail_ex+0xd9/0x280 [ 65.275730][ T6394] ? should_fail_ex+0xd9/0x280 [ 65.275751][ T6394] __x64_sys_rename+0x58/0x70 [ 65.275789][ T6394] x64_sys_call+0x24e/0x3000 [ 65.275814][ T6394] do_syscall_64+0xc0/0x2a0 [ 65.275841][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.275862][ T6394] RIP: 0033:0x7fd855fcacb9 [ 65.275878][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.275936][ T6394] RSP: 002b:00007fd854a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 65.275954][ T6394] RAX: ffffffffffffffda RBX: 00007fd856245fa0 RCX: 00007fd855fcacb9 [ 65.275982][ T6394] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 65.275995][ T6394] RBP: 00007fd854a27090 R08: 0000000000000000 R09: 0000000000000000 [ 65.276007][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.276018][ T6394] R13: 00007fd856246038 R14: 00007fd856245fa0 R15: 00007ffd2dea5068 [ 65.276035][ T6394] [ 65.549317][ T6400] EXT4-fs: Ignoring removed orlov option [ 65.585438][ T6407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 65.614326][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.722'. [ 65.617099][ T6400] EXT4-fs mount: 103 callbacks suppressed [ 65.617115][ T6400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.624619][ T6412] netlink: 'syz.6.723': attribute type 4 has an invalid length. [ 65.629408][ T6407] netlink: 80 bytes leftover after parsing attributes in process `syz.1.722'. [ 65.641017][ T6412] netlink: 152 bytes leftover after parsing attributes in process `syz.6.723'. [ 65.644097][ T6410] netlink: 'syz.5.724': attribute type 3 has an invalid length. [ 65.649873][ T6400] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.720: bit already cleared for inode 15 [ 65.699112][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.709650][ T6412] .`: renamed from bond0 (while UP) [ 65.737348][ T6416] FAT-fs (loop5): Directory bread(block 64) failed [ 65.744866][ T6416] FAT-fs (loop5): Directory bread(block 65) failed [ 65.751884][ T6416] FAT-fs (loop5): Directory bread(block 66) failed [ 65.758418][ T6416] FAT-fs (loop5): Directory bread(block 67) failed [ 65.765206][ T6416] FAT-fs (loop5): Directory bread(block 68) failed [ 65.771741][ T6416] FAT-fs (loop5): Directory bread(block 69) failed [ 65.778253][ T6416] FAT-fs (loop5): Directory bread(block 70) failed [ 65.784813][ T6416] FAT-fs (loop5): Directory bread(block 71) failed [ 65.793311][ T6416] FAT-fs (loop5): Directory bread(block 72) failed [ 65.800172][ T6416] FAT-fs (loop5): Directory bread(block 73) failed [ 65.817176][ T6416] syz.5.726: attempt to access beyond end of device [ 65.817176][ T6416] loop5: rw=8388608, sector=1736, nr_sectors = 4 limit=256 [ 65.833835][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.860918][ T6424] syz.5.726: attempt to access beyond end of device [ 65.860918][ T6424] loop5: rw=8388608, sector=1736, nr_sectors = 4 limit=256 [ 65.878377][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.931154][ T6432] netlink: 84 bytes leftover after parsing attributes in process `syz.6.730'. [ 65.957528][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.023485][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.045481][ T6425] lo speed is unknown, defaulting to 1000 [ 66.109339][ T6449] Invalid ELF header len 10 [ 66.130833][ T3479] net_ratelimit: 16 callbacks suppressed [ 66.130846][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.141824][ T6451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.159854][ T6451] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.210107][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 66.227750][ T4916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.276603][ T6459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.292171][ T6465] netlink: 'syz.5.739': attribute type 3 has an invalid length. [ 66.299853][ T6465] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.739'. [ 66.325806][ T6467] netlink: 84 bytes leftover after parsing attributes in process `syz.5.742'. [ 66.335710][ T6459] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.382772][ T5741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.397482][ T52] dvmrp0 (unregistering): left allmulticast mode [ 66.469309][ T6483] netlink: 324 bytes leftover after parsing attributes in process `syz.5.743'. [ 66.530628][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.540074][ T52] bond0 (unregistering): Released all slaves [ 66.553297][ T6475] syzkaller1: entered promiscuous mode [ 66.558778][ T6475] syzkaller1: entered allmulticast mode [ 66.817183][ T52] tipc: Left network mode [ 66.948152][ T52] veth1_macvtap: left promiscuous mode [ 66.988971][ T6503] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 67.010109][ T52] veth0_macvtap: left promiscuous mode [ 67.015876][ T52] veth1_vlan: left promiscuous mode [ 67.022832][ T52] veth0_vlan: left promiscuous mode [ 67.029714][ T6503] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.036318][ T6503] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.749: Block bitmap for bg 0 marked uninitialized [ 67.052237][ T6503] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 67.061404][ T6503] EXT4-fs (loop3): 1 orphan inode deleted [ 67.067755][ T6503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.115350][ T6503] ext4: Unknown parameter 'vƱTZz^FNTtJS[ [ 68.236716][ T6643] __dump_stack+0x1d/0x30 [ 68.236741][ T6643] dump_stack_lvl+0x95/0xd0 [ 68.236761][ T6643] dump_stack+0x15/0x1b [ 68.236812][ T6643] should_fail_ex+0x263/0x280 [ 68.236831][ T6643] should_fail+0xb/0x20 [ 68.236849][ T6643] should_fail_usercopy+0x1a/0x20 [ 68.236871][ T6643] _copy_to_user+0x20/0xa0 [ 68.236956][ T6643] simple_read_from_buffer+0xb5/0x130 [ 68.237062][ T6643] proc_fail_nth_read+0x10e/0x150 [ 68.237121][ T6643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.237167][ T6643] vfs_read+0x1ab/0x7f0 [ 68.237192][ T6643] ? nfc_llcp_getsockopt+0x74/0x300 [ 68.237216][ T6643] ? __pfx_nfc_llcp_getsockopt+0x10/0x10 [ 68.237250][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.237239][ T6643] ? do_sock_getsockopt+0x1c4/0x210 [ 68.237275][ T6643] ksys_read+0xdc/0x1a0 [ 68.237301][ T6643] __x64_sys_read+0x40/0x50 [ 68.237370][ T6425] ================================================================== [ 68.237393][ T6643] x64_sys_call+0x2889/0x3000 [ 68.237414][ T6643] do_syscall_64+0xc0/0x2a0 [ 68.237440][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.237461][ T6643] RIP: 0033:0x7fb7e970b58e [ 68.237477][ T6643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.237558][ T6643] RSP: 002b:00007fb7e81a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.237638][ T6643] RAX: ffffffffffffffda RBX: 00007fb7e81a76c0 RCX: 00007fb7e970b58e [ 68.237651][ T6643] RDX: 000000000000000f RSI: 00007fb7e81a70a0 RDI: 0000000000000004 [ 68.237664][ T6643] RBP: 00007fb7e81a7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.237676][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.237689][ T6643] R13: 00007fb7e99c6038 R14: 00007fb7e99c5fa0 R15: 00007ffd4b27fe68 [ 68.237749][ T6643] [ 68.330407][ T6425] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 68.330449][ T6425] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 68.330457][ T6425] write to 0xffffffff890e4b28 of 1 bytes by task 6643 on cpu 0: [ 68.330473][ T6425] vsnprintf+0x2ce/0x860 [ 68.330498][ T6425] vscnprintf+0x41/0x90 [ 68.330521][ T6425] printk_sprint+0x30/0x2c0 [ 68.330546][ T6425] vprintk_store+0x57b/0x910 [ 68.330568][ T6425] vprintk_emit+0x1a4/0x600 [ 68.330593][ T6425] vprintk_default+0x26/0x30 [ 68.330619][ T6425] vprintk+0x1d/0x30 [ 68.330639][ T6425] _printk+0x79/0xa0 [ 68.330654][ T6425] __show_trace_log_lvl+0x460/0x560 [ 68.330676][ T6425] __dump_stack+0x1d/0x30 [ 68.330696][ T6425] dump_stack_lvl+0x95/0xd0 [ 68.330716][ T6425] dump_stack+0x15/0x1b [ 68.330736][ T6425] should_fail_ex+0x263/0x280 [ 68.330754][ T6425] should_fail+0xb/0x20 [ 68.330770][ T6425] should_fail_usercopy+0x1a/0x20 [ 68.330788][ T6425] _copy_to_user+0x20/0xa0 [ 68.330808][ T6425] simple_read_from_buffer+0xb5/0x130 [ 68.330835][ T6425] proc_fail_nth_read+0x10e/0x150 [ 68.330866][ T6425] vfs_read+0x1ab/0x7f0 [ 68.330892][ T6425] ksys_read+0xdc/0x1a0 [ 68.330916][ T6425] __x64_sys_read+0x40/0x50 [ 68.330941][ T6425] x64_sys_call+0x2889/0x3000 [ 68.330963][ T6425] do_syscall_64+0xc0/0x2a0 [ 68.330987][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.331009][ T6425] [ 68.331017][ T6425] read to 0xffffffff890e4b28 of 8 bytes by task 6425 on cpu 1: [ 68.331036][ T6425] data_push_tail+0x100/0x470 [ 68.331062][ T6425] data_alloc+0x11b/0x390 [ 68.331086][ T6425] prb_reserve+0x8d7/0xae0 [ 68.331110][ T6425] vprintk_store+0x54a/0x910 [ 68.331136][ T6425] vprintk_emit+0x1a4/0x600 [ 68.331164][ T6425] vprintk_default+0x26/0x30 [ 68.331192][ T6425] vprintk+0x1d/0x30 [ 68.331211][ T6425] _printk+0x79/0xa0 [ 68.331228][ T6425] vlan_device_event+0x10b9/0x11c0 [ 68.331252][ T6425] raw_notifier_call_chain+0x6f/0x1b0 [ 68.331282][ T6425] __dev_notify_flags+0x1f0/0x390 [ 68.331312][ T6425] netif_change_flags+0xac/0xd0 [ 68.331329][ T6425] do_setlink+0x905/0x2940 [ 68.331357][ T6425] rtnl_newlink+0xea4/0x1370 [ 68.331378][ T6425] rtnetlink_rcv_msg+0x64b/0x720 [ 68.331400][ T6425] netlink_rcv_skb+0x123/0x220 [ 68.331420][ T6425] rtnetlink_rcv+0x1c/0x30 [ 68.331443][ T6425] netlink_unicast+0x5c0/0x690 [ 68.331463][ T6425] netlink_sendmsg+0x5c8/0x6f0 [ 68.331484][ T6425] __sock_sendmsg+0x145/0x170 [ 68.331507][ T6425] __sys_sendto+0x2b2/0x380 [ 68.331525][ T6425] __x64_sys_sendto+0x76/0x90 [ 68.331545][ T6425] x64_sys_call+0x29a7/0x3000 [ 68.331566][ T6425] do_syscall_64+0xc0/0x2a0 [ 68.331586][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.331602][ T6425] [ 68.331608][ T6425] value changed: 0x00000000ffffe0a1 -> 0x6f735f6f64203f20 [ 68.331622][ T6425] [ 68.331628][ T6425] Reported by Kernel Concurrency Sanitizer on: [ 68.331643][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.331671][ T6425] Tainted: [W]=WARN [ 68.331679][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.331692][ T6425] ================================================================== [ 68.756454][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 68.770812][ T6650] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 69.197628][ T31] bridge_slave_1: left allmulticast mode [ 69.211578][ T31] bridge_slave_1: left promiscuous mode [ 69.217373][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.224958][ T31] bridge_slave_0: left allmulticast mode [ 69.230696][ T31] bridge_slave_0: left promiscuous mode [ 69.236389][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.250580][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.461923][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.471192][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.479996][ T31] bond0 (unregistering): Released all slaves [ 69.487549][ T31] bond1 (unregistering): Released all slaves [ 69.495260][ T31] bond2 (unregistering): Released all slaves [ 69.503243][ T31] bond3 (unregistering): Released all slaves [ 69.511357][ T31] bond4 (unregistering): Released all slaves [ 69.564896][ T31] tipc: Left network mode [ 69.570933][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.581214][ T31] hsr_slave_0: left promiscuous mode [ 69.586800][ T31] hsr_slave_1: left promiscuous mode [ 69.593722][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.601632][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.633985][ T31] team_slave_1 (unregistering): left promiscuous mode [ 69.641168][ T31] team0 (unregistering): Port device team_slave_1 removed [ 69.650111][ T31] team_slave_0 (unregistering): left promiscuous mode [ 69.657763][ T31] team0 (unregistering): Port device team_slave_0 removed [ 70.026811][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.066480][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.112626][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.162629][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.223095][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.303982][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.353594][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.403127][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.678885][ T31] bridge_slave_1: left allmulticast mode [ 70.684598][ T31] bridge_slave_1: left promiscuous mode [ 70.690274][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.698332][ T31] bridge_slave_0: left allmulticast mode [ 70.704018][ T31] bridge_slave_0: left promiscuous mode [ 70.709608][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.717886][ T31] bridge_slave_1: left allmulticast mode [ 70.723539][ T31] bridge_slave_1: left promiscuous mode [ 70.729172][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.736953][ T31] bridge_slave_0: left allmulticast mode [ 70.742633][ T31] bridge_slave_0: left promiscuous mode [ 70.748245][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.756665][ T31] bridge_slave_1: left allmulticast mode [ 70.762431][ T31] bridge_slave_1: left promiscuous mode [ 70.768060][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.775952][ T31] bridge_slave_0: left allmulticast mode [ 70.781608][ T31] bridge_slave_0: left promiscuous mode [ 70.787335][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.872935][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.882711][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.892192][ T31] bond0 (unregistering): (slave team0): Releasing backup interface [ 70.900957][ T31] bond0 (unregistering): Released all slaves [ 70.908335][ T31] bond1 (unregistering): Released all slaves [ 70.916633][ T31] bond2 (unregistering): Released all slaves [ 70.925266][ T31] bond3 (unregistering): Released all slaves [ 70.983066][ T31] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.992449][ T31] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.001443][ T31] .` (unregistering): Released all slaves [ 71.008549][ T31] bond0 (unregistering): Released all slaves [ 71.102410][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.111762][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.120807][ T31] bond0 (unregistering): Released all slaves [ 71.127979][ T31] bond1 (unregistering): Released all slaves [ 71.175358][ T31] hsr_slave_0: left promiscuous mode [ 71.181166][ T31] hsr_slave_1: left promiscuous mode [ 71.186830][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.194236][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.202034][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.209420][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.218638][ T31] hsr_slave_0: left promiscuous mode [ 71.225148][ T31] hsr_slave_1: left promiscuous mode [ 71.231145][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.238562][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.246566][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.253986][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.264213][ T31] hsr_slave_0: left promiscuous mode [ 71.269683][ T31] hsr_slave_1: left promiscuous mode [ 71.275309][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.282677][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.294404][ T31] veth1_macvtap: left promiscuous mode [ 71.299861][ T31] veth0_macvtap: left promiscuous mode [ 71.305457][ T31] veth1_vlan: left promiscuous mode [ 71.310666][ T31] veth0_vlan: left promiscuous mode [ 71.316384][ T31] veth1_macvtap: left promiscuous mode [ 71.321896][ T31] veth0_macvtap: left promiscuous mode [ 71.327411][ T31] veth1_vlan: left promiscuous mode [ 71.332784][ T31] veth0_vlan: left promiscuous mode [ 71.417519][ T31] team0 (unregistering): Port device team_slave_1 removed [ 71.431369][ T31] team0 (unregistering): Port device team_slave_0 removed [ 71.480610][ T31] team0 (unregistering): Port device team_slave_1 removed [ 71.489794][ T31] team0 (unregistering): Port device team_slave_0 removed [ 71.539528][ T31] team_slave_1 (unregistering): left promiscuous mode [ 71.547148][ T31] team0 (unregistering): Port device team_slave_1 removed [ 71.556363][ T31] team_slave_0 (unregistering): left promiscuous mode [ 71.563601][ T31] team0 (unregistering): Port device team_slave_0 removed [ 71.593383][ T3423] lo speed is unknown, defaulting to 1000 [ 71.599225][ T3423] infiniband syz2: ib_query_port failed (-19) [ 72.417870][ T31] bridge_slave_1: left allmulticast mode [ 72.423664][ T31] bridge_slave_1: left promiscuous mode [ 72.429414][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.437367][ T31] bridge_slave_0: left allmulticast mode [ 72.443115][ T31] bridge_slave_0: left promiscuous mode [ 72.448831][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.522328][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.531906][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.541369][ T31] bond0 (unregistering): Released all slaves [ 72.573547][ T31] hsr_slave_0: left promiscuous mode [ 72.579686][ T31] hsr_slave_1: left promiscuous mode [ 72.585549][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.593051][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.630271][ T31] team0 (unregistering): Port device team_slave_1 removed [ 72.642073][ T31] team0 (unregistering): Port device team_slave_0 removed