last executing test programs: 9.850474648s ago: executing program 1 (id=1186): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44000) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0xfd) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000001c0)=[0x2, 0x2], 0x2) unlinkat(0xffffffffffffff9c, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x5}, 0x8) acct(&(0x7f0000003300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x54) unshare(0x22020400) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x73b, 0x400, 0x5, 0x1e1, 0x0, r6}, &(0x7f00000000c0), &(0x7f0000000080)) 9.016022628s ago: executing program 1 (id=1197): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa660}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x3003, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffd80, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800011702000000fcffff7f00000000000000000c00020001000000040000000800010001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000540)=""/145, 0x1b, 0x91, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) getdents64(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) 7.455463035s ago: executing program 1 (id=1205): sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x83d}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffbff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000029006bcd9e3fe3dc4e48aa31086b8703290000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a70525", 0x3a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000010000000000000000200002000a00000000000000ff01000000000000000000000000000100000000dd8fefc5b24caa23e912955753d8294d783955c453bc96a4c1598e86d8"], 0x60}}, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000140)={0x8, 0x26}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r7) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110128bd7000fddbdf25040000001400018008004d9c40d5a324050002"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="64f708002cbd7000fddb0025000008000500ec0000001400"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r9 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) 7.174551689s ago: executing program 1 (id=1206): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="70014000000000000040d443268cf742a62f5fffffec66f009ac989a645d209f33f60384d815f887f2b6bb4aa07f62d5fdf51a34dd358ea1ea9f1fdfde1b35f102c1b98007ae7765d6bc39dcee5279adbfcceff8223b846ef51c09968b5a59da6ab66ad19a9e75", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c001a800800028004"], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4263, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3ffffffffd, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") sendmsg$NFT_BATCH(r3, 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@quota}, {@data_journal}, {@jqfmt_vfsold}, {@nombcache}]}, 0x8, 0x622, &(0x7f0000000840)="$eJzs3c9vVNUeAPDvnU6npeW9FvLyFBfSxBhIlJYWMMSYCFtDCP7Yuaq0EKRQQmu0SGJJcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYoiMudM75XY6006nnZnSfj7JpefcO3PPuUO/PeeeOWcmgF1rJP2nEHEgIq4lEUO5Y8XIDo4sPe7BnzfPp1sS5fLbfyRx85NkMX+uJPs5mD35n6FIfi5E7O9ZXe7cwo3LkzMz09ez/Nj8lWtjcws3jly6Mnlx+uL01YlXJk6eOH7i5PjRTV1fvugzt9//cOizs+9++/WjZPy7X88mcSoeZw9Ir6v2uX2bKjl9zUaivORhfn/6up7c5Lm3i7+Gqr8nTyS1O9i2LmS/j/+NiGdiKHpy/5tD8embXa0c0FblJKptFLDrJC3Ff//WVwTosGo/oHpvX+8+eLVCm3slQCfcP700ALAU+70RUY3/4tLYYPRHunfgQbJinCeJiM2NzC1Jy/jpx7O30y0ajMMB7bF4qzrKXdv+J5XYHI7+Sm7gQWFF/BdyW7r/rRbLH6nJi3/onMVbEfFs1v6XYkPxP5KL//daLF/8AwAAAAAAwNa5ezoiXq43/6+wPP+nVGf+z2BEnNqC8td//69wL0skW1AckHP/dMRrEeWkTvxnhnuy3H8q8wF6kwuXZqaPZmsGD0dvX5ofrzlvfobwkc/3f9Wo/Pz8v3RLy6/OBczOdK9YsxB3anJ+crPXDUTcvxXxXGX+78Fsz8r5P2n7n9Rp/9P4vtZkGftfvHMusr8XtdaPf6Bdyt9EHKq7/udJdztZ+/M5xir9gbFqr2C15z/+4vtG5WfxvxDiHzoubf8H1o7/viT/eT1zTZ12ucdeiohjC8VyowdutP9/Nev/l5J3eqrnT300OT9/fTyilJxZvX+iyRcDdrhqPFTjJY3/wy+sPf633P/PxeGeiFhsssz/Px78rdEx/X/onjT+p9Zu/4dXtv8bT0zcGf6hUfnnmmr/j1fa9MPZHuN/kLf68ziaDdCuVBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnnKFiNgbSWF0OV0ojI5GDEbE/2KgMDM7N//ShdkPrk5F7C1Wvv+/UP2m36Go5JPq9/8P5/ITNfljEbEvIr7s2VPJj56fnZnq9sUDAAAAAAAAAAAAAAAAAADANjFYWfNf7qtd/5/6vafbtQParpj9FO+w+xRbfma5b0srAnRc6/EPPO2aj//ettYD6LzG8f/wUbmio9UBOkj/H3avFuPf2wWwA6wX/4UO1QPotCbH9PrbXQ+gG9z/AwAAAADAjrLv4N1fkohYfHVPZUuVsmMm+8POZmoP7F7m8MLuVZztdg2AbnGPDyTLqb/rLvZvPPs/aU+FAAAAAAAAAAAAAIBVDh2w/h92q7XX/5vbDzvZGuv/6wW/jwuAHaTxV38kpY5WBOi4Fu/xDQ3ADrLenb71/wAAAAAAAAAAAACwDfTfuDw5MzN9fW7h6Uu8vj2qsbHE4uS2qEZriepy8ZpDj9tTaG9EdP2Su5Io1X+d1068ERFbV40u/k0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW+DcAAP//jCoiXg==") unshare(0x20060400) r4 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x6, 0x0) socket$inet6(0xa, 0x80003, 0xff) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 5.570850307s ago: executing program 0 (id=1214): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0xf8, 0x16, 0x300, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e20, 0x9, 0x2, 0x20, 0x10, 0x3a}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x495, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f4, 0xaaee, 0x2}, {0x500002, 0xffffffffffffffff, 0x4, 0x2}, {0xc90a, 0x2127268a, 0x8}, 0x70bd2b, 0x8003507, 0xa, 0x0, 0x6, 0x10}, 0xff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2508000000180004801300010062726f6164636173742d6c696e6bb0"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff0000000061106c00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5.374756267s ago: executing program 0 (id=1215): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f00000000c0)="f40009f9f32b2b25fe80000200000000140f000000ad787cf38e845a265143040d001d3ca7c3c658", 0x28}], 0x1}, 0x20008060) 5.327537329s ago: executing program 0 (id=1216): sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x83d}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffbff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000029006bcd9e3fe3dc4e48aa31086b8703290000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a70525", 0x3a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000010000000000000000200002000a00000000000000ff01000000000000000000000000000100000000dd8fefc5b24caa23e912955753d8294d783955c453bc96a4c1598e86d8"], 0x60}}, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000140)={0x8, 0x26}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r7) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110128bd7000fddbdf25040000001400018008004d9c40d5a324050002"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="64f708002cbd7000fddb0025000008000500ec0000001400"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r9 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) 5.001470775s ago: executing program 0 (id=1219): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.948963006s ago: executing program 0 (id=1222): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@size={'size', 0x3d, [0x25]}}]}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) io_setup(0xa, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa082de2580045000028006400000400e000000211009078e0000002000000010000000008"], 0x0) rename(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x388, 0x218, 0x218, 0x0, 0x2e8, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'macvlan1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x5}}}}, {{@ip={@multicast2, @private, 0xffffffff, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1ff, 0x6, [0x32, 0x7, 0x19, 0x27, 0x2b, 0x41, 0x23, 0x12, 0x2a, 0x12, 0x9, 0xd, 0x34, 0xb, 0x3c, 0x29], 0x0, 0x40, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/23, 0xfffffffffffffc70}, 0xee37}], 0x1, 0x1122, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 3.428720942s ago: executing program 2 (id=1227): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x2, @perf_config_ext={0x100000001, 0x1000dd5}, 0x0, 0x0, 0x4, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4a, &(0x7f0000000100)=0xffffffff, 0x4) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x17, 0x9, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 3.416353682s ago: executing program 1 (id=1228): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1040046, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x8}}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobarrier}], [{@appraise_type}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'V}.'}}, {@smackfsroot={'smackfsroot', 0x3d, 'jqfmt=vfsold'}}, {@smackfshat={'smackfshat', 0x3d, 'grpquota'}}, {@seclabel}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefefffb, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0xff, @mcast1}]}, &(0x7f0000000080)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r6, &(0x7f0000000940)=@random={'osx.', ']\\\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000080)='!\x00') io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000380)={r5, 0x1, 0x5, 0x1, 0x0, 0xe}, 0x14) pwrite64(r10, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 2.84885191s ago: executing program 0 (id=1234): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="70014000000000000040d443268cf742a62f5fffffec66f009ac989a645d209f33f60384d815f887f2b6bb4aa07f62d5fdf51a34dd358ea1ea9f1fdfde1b35f102c1b98007ae7765d6bc39dcee5279adbfcceff8223b846ef51c09968b5a59da6ab66ad19a9e75", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4263, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3ffffffffd, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_timedsend(r3, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet(0xa, 0x801, 0x84) accept4(r4, 0x0, 0x0, 0x0) 2.557100494s ago: executing program 2 (id=1236): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1040046, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x8}}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobarrier}], [{@appraise_type}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'V}.'}}, {@smackfsroot={'smackfsroot', 0x3d, 'jqfmt=vfsold'}}, {@smackfshat={'smackfshat', 0x3d, 'grpquota'}}, {@seclabel}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==") creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefefffb, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0xff, @mcast1}]}, &(0x7f0000000080)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r6, &(0x7f0000000940)=@random={'osx.', ']\\\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000080)='!\x00') io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000380)={r5, 0x1, 0x5, 0x1, 0x0, 0xe}, 0x14) 2.473924269s ago: executing program 1 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="70014000000000000040d443268cf742a62f5fffffec66f009ac989a645d209f33f60384d815f887f2b6bb4aa07f62d5fdf51a34dd358ea1ea9f1fdfde1b35f102c1b98007ae7765d6bc39dcee5279adbfcceff8223b846ef51c09968b5a59da6ab66ad19a9e75", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c001a800800028004"], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4263, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3ffffffffd, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") sendmsg$NFT_BATCH(r3, 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@quota}, {@data_journal}, {@jqfmt_vfsold}, {@nombcache}]}, 0x8, 0x622, &(0x7f0000000840)="$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") unshare(0x20060400) r4 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) socket$inet6(0xa, 0x80003, 0xff) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 1.871362878s ago: executing program 2 (id=1241): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x20008060) 1.812928351s ago: executing program 2 (id=1242): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x401, 0x253237844f167991, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 1.543930534s ago: executing program 4 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.473182728s ago: executing program 4 (id=1244): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x81, r6, 'id0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r11, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "66aac1", 0x0, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x74}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000001800)={0x504, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2b, 0x5a, 0x1, 0x18, 0x24, 0x12, 0x2e, 0x4, 0x12, 0x9, 0x51, 0xb, 0xc, 0x48, 0x6, 0xc, 0x16, 0x72, 0x30, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x3, 0x5, 0x7ff, 0x8, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x2b, 0x2, 0x13d9, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x30, 0x6, 0x24, 0x4, 0x9, 0xc, 0x1b, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x5}, {0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x2}, {0x4, 0x8}, {0x4, 0x4}, {}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x1}, {0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x9}, {0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x30, 0x48, 0x48, 0x38e31bd2d4b6b189, 0x7c, 0x4, 0xc, 0x24, 0x60, 0x6c, 0x16, 0x6c, 0x5, 0x16, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xee, 0x3, 0x6, 0x62b, 0x57, 0x100, 0x9, 0x2bb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x84, 0x2, 0xfd2, 0xffc5, 0x8, 0xb499, 0xcac]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x8, 0x100, 0x16, 0x9, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x18, 0x4, 0xc, 0x5, 0x1, 0x1b, 0x24, 0x1c, 0x2, 0x16, 0x18, 0x24, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x3}, {0x1, 0x4}, {0x7, 0x5}, {0x6, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x7}, {0x1}, {0x0, 0xa}, {0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x7, 0x4}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {}, {0x1, 0x9}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x4}, {0x6}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x4}, {0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x2}, {0x6}, {0x3, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x5, 0x1, 0x4, 0x8, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x16, 0xb, 0x1, 0x48, 0x4, 0x0, 0x16, 0x30, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x9}, {0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x7, 0x8}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x36d, 0x5, 0x97, 0x5, 0x5, 0x3, 0x9, 0x2d]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0x4, 0x0, 0x6, 0x1, 0x200]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x5, 0x1b, 0x5b, 0xf, 0x48, 0x9, 0x24, 0x6c, 0x60, 0x12, 0xc, 0x18, 0x6c, 0xc, 0x5, 0x24, 0x3, 0x16, 0x18, 0x12, 0x24]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0x0, 0x8, 0x5, 0x73c, 0x40, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb1f, 0x3, 0x4, 0x83d4, 0x6, 0x8000, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x12, 0x30, 0x9, 0x3, 0x16, 0x36, 0x6c, 0x6, 0x9, 0x9, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x1b, 0xb, 0x6c, 0x16, 0x6c, 0x12, 0x2, 0x6, 0x3, 0x1b, 0x64, 0x23, 0x2, 0x24, 0x48, 0x16, 0x6c, 0x18]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x6, 0x7}, {}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {}, {0x3, 0x5}, {0x3, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x18, 0x24, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x4}, {0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x7}, {0x5}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x6}, {0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0xc, 0x3, 0x16, 0xc, 0x5, 0x18, 0x16, 0x60, 0x9, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x200, 0x0, 0x4d7, 0x3, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0x1}, {0x7, 0x6}, {0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x4}, {0x2, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x2, 0x2, 0x8000, 0x2, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7e4b, 0x8, 0xd, 0x5, 0xd8, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x2, 0x5, 0x100, 0xdd01, 0xfff7, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x3, 0x1, 0x626, 0xd5, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0xa}, {0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x2}, {}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x1}, {0x1, 0x3}, {0x5, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0x9}, {0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x8}, {0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0x800, 0x101, 0xf9, 0xe, 0x828]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x59a, 0xffff, 0x8001, 0x7, 0x1, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x20004010}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040}, 0x980) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) 1.372318842s ago: executing program 2 (id=1245): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.334856744s ago: executing program 3 (id=1246): pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000240)='?*', 0x2}], 0x1, 0x2) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1.316606895s ago: executing program 3 (id=1247): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16=0xffffffffffffffff, @ANYRESHEX], 0x4, 0x1296, &(0x7f0000001b80)="$eJzs3c9rY0UcAPBv2nQ37bpN1XV1F8RBL4qQ3fbgyUuRXRArSrULKghvbaoh6Q+aUEgRt548Cf4Zoh69CeI/0IsXz4Ig0ovHPYhP2qRr0/SX/Qny+VwyzMx35jud18ALb3gbr341X59rVuayVgwUClFcGoriwxQpBmIwOtbipXu//PrsO++9/8bk1NSd6ZTuTr47/kpKafS5Hz/49Lvnf2pduff96A+XY31sYOPPid/Wr6/f2Pj726g1U62ZFhZbKUv3Fxdb2f1GNc3WmvVKSm83qlmzmmoLzepyT/tcY3FpqZ2yhdmrI0vL1WYzZQvtVK+2U6uQWsvtlH2c1RZSpVJJV0eCk5j55mGe5xF5PhSXIs/zfDhG4ko8FldjNMoxFo/HE/FkXIun4no8Hc/Eja1eF503AAAAAAAAAAAAAAAAAAAA/L8ccv6/4Pw/AAAAAAAAAAAAAAAAAAAAnL3d5/+LEd7/DwAAAAAAAAAAAAAAAAAAAOfskPf/7zr//7Lz/wAAAAAAAAAAAAAAAAAAAHAWSp2P6ZRKEfNfrMyszHQ+O/WTc1GLRlTjdpTjr9g6/d/RKd99ferO7bRlLG7NP+jGP1iZGeyNHx8qx1hhz/jx4YhIKfXGX46RnfETUY5re88/0Zl/V3wpXnxhM/7zTnwlyvHzR7EYjZiNKHRXvxX/2XhKr701Ndwbf3Oz374Gz3hbAAAA4DRV0iP99+9r3U6d9lJve6epe3+euj0LB/w+sOv+vBg3ixe1arY126v1rNGoLh+zcGn/cS6dbOS+QiEisthZMzry+/Tm5EccZ/tyO6V8dhQGjxF1/DSGDu5zgj2N4pH/mKv10lFSPfrudJNf212TlyN21Nz68M36oeP88fWOmlKc9nbvVRh4tNKB7mWWNdaOfLHFWp6faYZ9/4zD7dX65YOi9v/OKJzxdxLn599Nv+hMAAAAAAAAAAAA+C/2fPpvOCL6ngf8pK9m+/Hw3vD+kfef/ctzWCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+hs8cA") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r5, &(0x7f0000004d00)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB="d074c6f8a161d996aabc67de99e7de1fc8bf64f1b989a7f0177474c031d9edee51fed8c77b266d566cc600cb9337d221f03097b5f93ce6b427ade2b2887080dd112cb6e82a360507960d539c936997e51f180cad9930ee8ce7b4de7bc0de7600c9bfc95abd1ba4815c72a6d591cdeb1abbd5b917e82e4bdd50b306a6c6b8e714f60982c95196fff7b22d"], 0xa) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) 1.246250709s ago: executing program 4 (id=1248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 481.166866ms ago: executing program 2 (id=1249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1, 0x0, 0x0, 0x4102}, 0x0) 396.05393ms ago: executing program 4 (id=1250): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x81, r6, 'id0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r11, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "66aac1", 0x0, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0500000000000000339f30dd2f2eed4e94c93ebf5b00000f00000008000300", @ANYRES32=r12, @ANYBLOB], 0x74}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000001800)={0x504, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2b, 0x5a, 0x1, 0x18, 0x24, 0x12, 0x2e, 0x4, 0x12, 0x9, 0x51, 0xb, 0xc, 0x48, 0x6, 0xc, 0x16, 0x72, 0x30, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x3, 0x5, 0x7ff, 0x8, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x2b, 0x2, 0x13d9, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x30, 0x6, 0x24, 0x4, 0x9, 0xc, 0x1b, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x5}, {0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x2}, {0x4, 0x8}, {0x4, 0x4}, {}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x1}, {0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x9}, {0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x30, 0x48, 0x48, 0x38e31bd2d4b6b189, 0x7c, 0x4, 0xc, 0x24, 0x60, 0x6c, 0x16, 0x6c, 0x5, 0x16, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xee, 0x3, 0x6, 0x62b, 0x57, 0x100, 0x9, 0x2bb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x84, 0x2, 0xfd2, 0xffc5, 0x8, 0xb499, 0xcac]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x8, 0x100, 0x16, 0x9, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x18, 0x4, 0xc, 0x5, 0x1, 0x1b, 0x24, 0x1c, 0x2, 0x16, 0x18, 0x24, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x3}, {0x1, 0x4}, {0x7, 0x5}, {0x6, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x7}, {0x1}, {0x0, 0xa}, {0x5}, {0x2, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x7, 0x4}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {}, {0x1, 0x9}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x4}, {0x6}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x4}, {0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x2}, {0x6}, {0x3, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x5, 0x1, 0x4, 0x8, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x16, 0xb, 0x1, 0x48, 0x4, 0x0, 0x16, 0x30, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x9}, {0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x7, 0x8}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x36d, 0x5, 0x97, 0x5, 0x5, 0x3, 0x9, 0x2d]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0x4, 0x0, 0x6, 0x1, 0x200]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x5, 0x1b, 0x5b, 0xf, 0x48, 0x9, 0x24, 0x6c, 0x60, 0x12, 0xc, 0x18, 0x6c, 0xc, 0x5, 0x24, 0x3, 0x16, 0x18, 0x12, 0x24]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0x0, 0x8, 0x5, 0x73c, 0x40, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb1f, 0x3, 0x4, 0x83d4, 0x6, 0x8000, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x12, 0x30, 0x9, 0x3, 0x16, 0x36, 0x6c, 0x6, 0x9, 0x9, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x1b, 0xb, 0x6c, 0x16, 0x6c, 0x12, 0x2, 0x6, 0x3, 0x1b, 0x64, 0x23, 0x2, 0x24, 0x48, 0x16, 0x6c, 0x18]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x6, 0x7}, {}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {}, {0x3, 0x5}, {0x3, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x18, 0x24, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x4}, {0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x7}, {0x5}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x6}, {0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0xc, 0x3, 0x16, 0xc, 0x5, 0x18, 0x16, 0x60, 0x9, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x200, 0x0, 0x4d7, 0x3, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0x1}, {0x7, 0x6}, {0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x4}, {0x2, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x2, 0x2, 0x8000, 0x2, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7e4b, 0x8, 0xd, 0x5, 0xd8, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x2, 0x5, 0x100, 0xdd01, 0xfff7, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x3, 0x1, 0x626, 0xd5, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0xa}, {0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x2}, {}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x1}, {0x1, 0x3}, {0x5, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0x9}, {0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x8}, {0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0x800, 0x101, 0xf9, 0xe, 0x828]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x59a, 0xffff, 0x8001, 0x7, 0x1, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x20004010}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040}, 0x980) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) 357.278143ms ago: executing program 3 (id=1251): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@size={'size', 0x3d, [0x25]}}]}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) io_setup(0xa, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa082de2580045000028006400000400e000000211009078e0000002000000010000000008"], 0x0) rename(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x388, 0x218, 0x218, 0x0, 0x2e8, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'macvlan1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x5}}}}, {{@ip={@multicast2, @private, 0xffffffff, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1ff, 0x6, [0x32, 0x7, 0x19, 0x27, 0x2b, 0x41, 0x23, 0x12, 0x2a, 0x12, 0x9, 0xd, 0x34, 0xb, 0x3c, 0x29], 0x0, 0x40, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/23, 0xfffffffffffffc70}, 0xee37}], 0x1, 0x1122, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 248.905928ms ago: executing program 4 (id=1252): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000003040)={0x8, {"488085fddf7e1378d3ad4adb6e165913c1f7ae15c9b4ed75d7413838ff0d9381cead5adbe8228d9ba29fe815a6f64afca949ca64011b9d8c93b4272d6428962fe017b1cb68796b7b800b25eb3013496be2e3e973309e6842f2df0e5309a233d16ced2bc26cd6f7db616268621fe160c1644afc707a535571e0a936469f5dd6d60c6962109cd8de336fc0938bcd412788f01c1d84e33d5eaa3e140944ddefde0366395044cf0f095786b3f1fd27c0eaf2d0df657acf52c9220297bc28779a85ac06d4f14c31cbfced5519b61ddf599c08c7f10e385e4a6637e44ce117631e6d561c5118ad8e21bba948d572e54c67516e0f2a504f05f23e00d9b04160dac7e52d6caacf617d94e200e9c97771d56fe7b2ad6b69247904463f36b11e74b41ea9e63e77ded5af1406fe0f01f2350e756fd41c94f9dee22f611720853d7f8fd755903f1c3e044bd704bd420cd6d5b2cd96e583ff1ddb0ad39155daa2f29a4f61298b44ea802bbac9b1f552cf0279f52ff200178468b94b293f7052817d89adb9130a3ecac5ceeeb386a31a7d9807f069ad07e3488e99a0b7f7f92fc2a63226175432a93ae4dc820e702d21bdec10a773c7b3de3f0ec4b5f8af60a159aaa4231ed4e79883acf5d2eed3a0fd3445d46d7fbbd47f2c610d96d6435293b103db15b8e7383e63e9d672410f5248183d4e608e7aee4d9dbfd040fb3fae39faec3cc0f5410d0d479bc1b7addd255ba502a52fa858eb6574530fd16c01e1138b19258e1c40b9a29a8672f418159f663bc8fe634e3a0d23dde1ced471cfb1decc1a9464667771b795229b1906651e9e5e4402c7e75182b1432acb4b54c499358585aa83fca804fbdd12dfd3b9e95b0ac718cadb879a2898d86c4ed914a59918df6ba519de4599f662811202158e418cef0d103ed4e77833d4dea6e59f7fef1c86f818121655dd1b2cb3717c892a289797049911356b5dd5dc0c50caadd0dd0318994d730fd6e6953e01730fb2682ab3f7ca8b4d596574456f59b95f34ff6f79db68b495010b8816a7b55229b35a2790f25c42ef1efcc5271c66500fc285de61516fc401518ba1ae388f90b0a5760e01031ceed37d1eb8a792f4a196a9fa0ff1579358bfe5c63744027d1a01e0a4602c79c2fe727034a4d810f0a2c30dc5a4c122e510e4d6348774754bf1f924c1d5a31dccf345a6c752389cc38e46e968e3b2815e2ecc3e5827f198f5d836b5783e9d7cc5bc5ba1715d23a4c35157b28e997010c627cbcebda89d08ac88e3d2f387c87af78b2a565dd5704bf3c12e4019d91890ad4f660345b384b59fad6d9f56f1fcf35babe5a9fbd8dd3908be450edf05ca8a3154fb3ac1af485508c61a7ba322ac06928e7d660fee6bfef74c9c4f22bbab318077446163a3230a3d486ce6d71aed12e2581e4208eed1a540560921ac89e9372482594351a5ff0cf9e95e80f0a69c4d621638c9056ae0bdfc44895f061767aba8400da865b73b5488c690694af744372c00d87bba4664a60f13f1453337113055d7b659a87208c1e663e4d35f0ebcfe70459f5ec5812434468cec38d3fbcf90598de986b3d49ad45e7b3b230fc389b5278ed6242abe9c44a8c74438968cc9b7a253d89c5b14f7a917b86a6d51f5d5380f2a7606dbe1867fd781fab284d153e20f5bf1a2c8156b93e60dc8945eb8385d937537b785f6f6af81ea0131398c77819ddea78eadf6b6f019db772e69e9cde3540ddc95625987b4a4e1dbbf15bc0217abac6cc3ff0650ed11fa612b90afaab842be4c2bd9967702b023e8ecd5f4a0e62af56f7320241a8516bcdf344a4421eed035b8c5a126820c5dc3962f5df4bf369bd6260eb09aa8e1310bf6f28aba0e3236f699721daa26950de7fa8fd8c3d2adebc101e304d0ed1af839c74b6cc42a6d7244f6b31ed08f6f12f62569b2c0602cc371962b3074b9b3c5f6326247d4ffec7f2d0a073e5a678e76f4243533001b1c0de6739c5c6ec0195fa9a8e898c2068bb614c40c403324e84cdbc530121217ba49f300aa8d5056d170d0a6bc8827ee20d55401b9f401b12e212cf630781139978b5fb38fdf768fec87b79f7a70d6083c3df98019ebd09b7941708e06c8d9fa930a1fdb993e0061343c87b4cf47dd36f9a3d603ca986f5144af403b7b04a93f5808a8c192df5e4c17af1ec23eddd1e7fc91109e6a4cfe5e23435bcabf3915ce5242cb6f7974e97c8ad3773e3a510afa52c4193c36fd1b99a02ece5b19ad35eb8fa97b57fd1641b463de79cdd2aac5d5b4060a040ad1d5752d70015b74d556fb4ef0cc8747591edc8858707616104f0ec342fb3a9b95df31b6f84e56387aae80a72d8dd670be7aaeef54065d6e2d7837481ce5622ee3c115d02d50efdb20aaf25b636d6d6c7e49f50a4b30ae243ecf1187ffe851c52bb1849c5e5c0979b758b747aebfdab58d8fd60faa5d5005f401c661256183dd4e7cba38b4ccf03506398eab901595dc2de27ab231abdddffc9d120abd8025b77ac47f39b6373a38a09bc045559578ccdf0402385177d499333d06d2cd3f604689d50dcd01b04ffbcb545385da389e4b6102ee77febb8a34a906f822601e61d2d3fc9e206caf3753f65422a5ff31dc3b3c4d09aa9a90f9ebc858ee2e4df6a730948e436586c665a3c64aab00aa757d252eec5b8bea5035a5b9f644cb84a991286edc2a394cef9fd40ad085aa99680aea363dc163c2ef40e0f289e0b79dc600f31ae510bbd74f963632ff25230a1ec866fed0db0d0af59c5b9f4a18659f5a218c3d0db80700719a61e59efbd5f996145139e5654a9290bf504eb7453775b8c6190ff51d4c04ce9384060f1dd34799fee04c0f951ae15cb589f80dc544c05421d60f51cbc78df7dceff213575bfebe2bb307d196ef0a5cf3c2608fbb969a574e6dce9132246447a84cab6dd4923281cf40bc19c29585a02bc0d2d491907e5b528a1cfc7b2fe88dc2520ea49903423cb7a0d23530daa7217e7f312d4ec67c02fc74ab8d91b8ead50bfe9508b0f7d70e88868ee1a5f38349054374ae463d1148e0ca238c0f9fe7b40f6fba87498697f3220612ea66feb18a29f1df04234ac3d69e0706d0deef321d09ee16de188a32f4c41635cf48ee35a42140fc08b42c2e0e289a3c73fd4b0e656a72b29b99093127a17aaa199610787787abb0f4613dd03332a9306b9b5e98e9c839ffce5e72c44b288593bee47253613dc0fc3e583ab9aac7e1a161dfc36bd038d533eb6829b22dc1a01f055c16f83c1b1abe049b5744508456658c6df44c13d6ab1a18d76a55740cdcfca4a1dd81b54d9c4e71cef9f4b55f1ebc7751766175d631f9607f22a613377f6d96afaddbc66cbeef20ae578468f33265516ee711e2591e1af272a35bf5cedc78aef9e330bf6f3f3b9cdb7d373754125c9caea6a4d344d098c7332175b09441cc11040e5b71e9b975b2aaaaa5f8c5f502b00ad3ade9de204602aa227c9f11da55107b79802c09d246050c6580d92559a47935cfb59b47e88aa8095ea1ac34578697ffe89c440a2369f6661db2c24f1056d553e200184b927b359efba5db1e69e7f2cf5e4dd9c9bbc3e085fc38c43f436aa47abcc1e9986fc0226262588110c5b27c6fe9b8072cd8204c500883d3b9feaed80d5d87929d01b9bad995ed58a1be3ccad600840c6424625f4f4c221c8e1cd11af1a5ac153954ac6b441692f296ac2d529233d317fecf3fbfa53f77c8ea47d1385e3ca4b8b55fd2467cac15af1bfa04fb41784305a4b9aed6880cfba9629d6dabd22b2bd90c1aad0f2e0dff0777112b1e313447cf9417a52a58b17cc73ab03d4841ec9b1dc3f75d0fb5ece65c99982b338bb2f42b68104d94c826247814bd68e7c9664e8b2a9fdaf7fde4730960b43a496cb818badfbc97d1e51aa7817657e49536e69cacb3c4abb27dfe10d5c962fabdd3056d290a2b969e7f61d144e22539c5e2027b57c8e099db6ab8f0fdda7412b393af60e3299478744e9071801c4c39b0c87d4f237ade73b955812f254e641844e985d40f3e4df51bf7a9c81f02d22ad8296fe94d4664f3c0d113974ba222dab68c4407e9d5359205a5fec059d4370e0d15fd040ced32baa7e8586d38680a4c2e4e5679c0d374636e9dc0fd9a06808671f08e8c19b0bed18540de8107855f410f8954e078755a8c7b0822c25e2534887c9593aa1e008e78244cfec5b347a847ecf61cb207dcb2170b663a54d98ffeea991a9d944e4a8302bf37231bf3558c6b2fcaf925becb663bb574341bc81bbc50e9f0108c5d8a7783caf25bcb3bc24368e8a4915785652877555d22f7d6cbcb12049180ee4c49502d41c0fb00e31f3835b53e622e85290ee5a641eb9215567fed4782484ba8ccb43d81d3ef3ca5d8a2e3389864c15946e3d5dad607447f35a5396c27e99e20a1b98393169d85e788e9c4f9367649b308094479bc0ad8d68f0dc655724e2d9f599557f567fe7fd11f87b37df7ce0530e40d7e0ab06c2b273716e2598bd6e816c18c2e3c038b199e58424a5d72759af13e121e21d263fa0f24577a32b4356919cc22c5d1929b15590a53861aaf68aaa9ed404d1e64c3c6b0fa19e0a5299bd46867aff993b87ce96fd493fa2b125ea23907f9598acc33cd7e90c2383d5af5d232d979766ac2743c93d947db811d38df20742fa1db7c6f2306ec008ca9d53faf1a7cc2372d42437f906ef6ff9db785ac575c97e4f568e57414a0881ffe1b8dee59240305e28ab5f4f2c990c959009b022a656386229c7a71b3fcbc381a1f3511751ef19653d8e7dd0de12f630c719413a84b385802f5e8e2680cc2afa7fbb1cd1193a1e5af32ad07b24ba1c05904d3325634d10aa685d97f9c1d58377cfa46f17f0f57c7d48ce0917a8b4f5bccdf60e52764b7a826e6ccab1b70821a74cc5cc2e15532d3ef346aaf9c31fe0e0776bb1e3f4f5f276bcf53f5ea9018609b18b47497dba8e73676d2fc2fba47472ffba25ba7ddca1e9754b516eff05a05eaba9e7752f8d97f99684e3a53ded2d2c1913a6e488c65f57f8d85d261c762c37015c756e0aeed54edda41236bae33ed83c688478bcd94ce9e67971c0f8e588f1a3a4cd3f7da5e571c1984d9c9a10bb7eaf8414cbabf5fb97a17a67d10ae1a7ab96a8df88da1e82e797e67b534f765a5dcac052c30499547f375cfbea8d9f434f48d60e05df8797919fef5cb01a04177ed092a37f71f7948279bc4c35e3239e943a1507cff0b7152dd95c27e573e0191cfe1bc9f3862e5329ddcd160c61fc5bb82b57d80caea9aac90fa0c413ea9f8538055a45b77d5a7548f6a4f2414714495576a1de459a55ab298a2a2fa33459da0d205e4b91d340c0721226e546f323bb878605590b66516fa51fd635e5eaa580486f6fb543b6b5236871aa3dedcb44e7d73d9bf704420fc0bb9b1a0f21e848ed9161e9bf1ae3bc628861b5007f0a30684a178dc85dbf034e9234fe603698cda4811dfcb73253335ca7cee533957578a9b97f149ae6dbd43c4aae8a16da135830f7a1c5b913838d5c28936f45f2d9ed991ec7a3ab83df4dd6fe2ff720a6b8abf40927bf8835bfa25effb92eadea47ae1629193ee5707767b13771cb105f231be2af8380a85b9de42f682d22d17c926ccbe39ea3fa7a5d3c0f6b3dc7802b927a36cd04ade3e02bf8ce06a52585388fb8f49df4dda68e9eb426da9c0909d5b9cf4b16c2e3f78331c8683a1698033ea0b1ed4dd33edeecd89c4f14caf84d52336e500", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00') 178.125871ms ago: executing program 4 (id=1253): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16=0xffffffffffffffff, @ANYRESHEX], 0x4, 0x1296, &(0x7f0000001b80)="$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") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r5, &(0x7f0000004d00)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB="d074c6f8a161d996aabc67de99e7de1fc8bf64f1b989a7f0177474c031d9edee51fed8c77b266d566cc600cb9337d221f03097b5f93ce6b427ade2b2887080dd112cb6e82a360507960d539c936997e51f180cad9930ee8ce7b4de7bc0de7600c9bfc95abd1ba4815c72a6d591cdeb1abbd5b917e82e4bdd50b306a6c6b8e714f60982c95196fff7b22d"], 0xa) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) 133.062703ms ago: executing program 3 (id=1254): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1040046, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x8}}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobarrier}], [{@appraise_type}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'V}.'}}, {@smackfsroot={'smackfsroot', 0x3d, 'jqfmt=vfsold'}}, {@smackfshat={'smackfshat', 0x3d, 'grpquota'}}, {@seclabel}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='!\x00') 1.4134ms ago: executing program 3 (id=1255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 0s ago: executing program 3 (id=1256): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000000006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x2, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x40, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0xff, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827780, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x42, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x1, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r6 = socket$netlink(0x10, 0x3, 0x15) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140)=[{r8, 0xa180}, {0xffffffffffffffff, 0x110}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xfd}, 0x6333, 0xffffffffffffffff, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) kernel console output (not intermixed with test programs): report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.101015][ T6226] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 119.120138][ T6241] loop4: detected capacity change from 0 to 1024 [ 119.166526][ T6226] loop2: lost filesystem error report for type 5 error -117 [ 119.166887][ T6226] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.699: corrupted inode contents [ 119.186620][ T6241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 119.198931][ T6241] System zones: 0-1, 3-36 [ 119.204374][ T6226] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.204672][ T6226] EXT4-fs error (device loop2): ext4_truncate:4587: inode #12: comm syz.2.699: mark_inode_dirty error [ 119.225438][ T6226] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.225738][ T6226] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 119.242857][ T6241] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.704: bad orphan inode 134217728 [ 119.244250][ T6226] loop2: lost filesystem error report for type 5 error -117 [ 119.257713][ T6241] loop4: lost filesystem error report for type 5 error -117 [ 119.257719][ T6226] EXT4-fs (loop2): 1 truncate cleaned up [ 119.270492][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 119.284901][ C0] EXT4-fs (loop4): initial error at time 1774443596: ext4_orphan_get:1417 [ 119.293840][ C0] EXT4-fs (loop4): last error at time 1774443596: ext4_orphan_get:1417 [ 119.303327][ T6226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.319759][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.338168][ T6226] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.699: iget: bad i_size value: 360287970189639690 [ 119.366477][ T6251] loop3: detected capacity change from 0 to 1024 [ 119.385059][ T6251] EXT4-fs: inline encryption not supported [ 119.403021][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.419396][ T6251] EXT4-fs: Ignoring removed i_version option [ 119.465982][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.533072][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.795438][ T6266] netlink: 96 bytes leftover after parsing attributes in process `syz.3.710'. [ 119.888045][ T6259] loop0: detected capacity change from 0 to 1024 [ 119.918747][ T6275] loop4: detected capacity change from 0 to 164 [ 120.038572][ T6259] lo speed is unknown, defaulting to 1000 [ 120.072685][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 120.072698][ T28] audit: type=1400 audit(1774443597.444:569): avc: denied { write } for pid=6265 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.248405][ T6286] tipc: Invalid UDP bearer configuration [ 120.248425][ T6286] tipc: Enabling of bearer rejected, failed to enable media [ 120.277167][ T6286] netlink: 'syz.2.715': attribute type 2 has an invalid length. [ 120.352914][ T6286] can0: slcan on ttyS3. [ 120.570570][ T6285] can0 (unregistered): slcan off ttyS3. [ 120.587619][ T6317] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.648406][ T6317] EXT4-fs (loop0): 1 truncate cleaned up [ 120.996166][ T6328] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 121.028231][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'. [ 121.086781][ T6328] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 121.110352][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 121.116831][ C0] EXT4-fs (loop0): initial error at time 1774443598: mb_free_blocks:2047: inode 11: block 64 [ 121.127117][ C0] EXT4-fs (loop0): last error at time 1774443598: mb_free_blocks:2047: inode 11: block 64 [ 121.212767][ T6328] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.721: corrupted inode contents [ 121.262223][ T6328] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #11: comm syz.0.721: mark_inode_dirty error [ 121.282984][ T6328] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.721: invalid indirect mapped block 1 (level 1) [ 121.296675][ T6328] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.721: corrupted inode contents [ 121.322870][ T6328] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 121.356120][ T6336] netlink: 96 bytes leftover after parsing attributes in process `syz.1.724'. [ 121.364981][ T6328] loop0: lost filesystem error report for type 5 error -117 [ 121.370067][ T6328] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.721: corrupted inode contents [ 121.391864][ T6328] EXT4-fs error (device loop0): ext4_truncate:4587: inode #11: comm syz.0.721: mark_inode_dirty error [ 121.403502][ T6328] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 121.412497][ T28] audit: type=1326 audit(1774443598.774:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.412628][ T6328] loop0: lost filesystem error report for type 5 error -117 [ 121.440192][ T6328] EXT4-fs (loop0): 1 truncate cleaned up [ 121.448684][ T28] audit: type=1326 audit(1774443598.774:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.570380][ T28] audit: type=1326 audit(1774443598.774:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.570408][ T28] audit: type=1326 audit(1774443598.774:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.570430][ T28] audit: type=1326 audit(1774443598.774:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.570523][ T28] audit: type=1326 audit(1774443598.774:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.570549][ T28] audit: type=1326 audit(1774443598.804:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.570697][ T28] audit: type=1326 audit(1774443598.804:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.570715][ T28] audit: type=1326 audit(1774443598.814:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 121.742879][ T6351] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.721: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 121.773530][ T6356] random: crng reseeded on system resumption [ 121.881101][ T6356] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 121.884448][ T6356] bond5 (unregistering): Released all slaves [ 122.036500][ T6366] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.732'. [ 122.408878][ T6374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 122.485834][ T6381] FAULT_INJECTION: forcing a failure. [ 122.485834][ T6381] name fail_futex, interval 1, probability 0, space 0, times 1 [ 122.515963][ T6374] System zones: 0-1, 3-36 [ 122.547580][ T6374] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.735: bad orphan inode 134217728 [ 122.562261][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.4.738 Not tainted syzkaller #0 PREEMPT(full) [ 122.562286][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.562295][ T6381] Call Trace: [ 122.562300][ T6381] [ 122.562306][ T6381] __dump_stack+0x1d/0x30 [ 122.562415][ T6381] dump_stack_lvl+0x95/0xd0 [ 122.562494][ T6381] dump_stack+0x15/0x1b [ 122.562510][ T6381] should_fail_ex+0x263/0x280 [ 122.562630][ T6381] should_fail+0xb/0x20 [ 122.562647][ T6381] get_futex_key+0x12f/0xbe0 [ 122.562738][ T6381] futex_lock_pi+0xfe/0x7e0 [ 122.562763][ T6381] ? _parse_integer_limit+0x170/0x190 [ 122.562786][ T6381] ? __pfx_futex_wake_mark+0x10/0x10 [ 122.562808][ T6381] do_futex+0x284/0x380 [ 122.562881][ T6381] __se_sys_futex+0x2f6/0x370 [ 122.562942][ T6381] ? mutex_unlock+0x4e/0x90 [ 122.562966][ T6381] __x64_sys_futex+0x78/0x90 [ 122.562987][ T6381] x64_sys_call+0x24ab/0x3020 [ 122.563038][ T6381] do_syscall_64+0x12c/0x370 [ 122.563057][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.563075][ T6381] RIP: 0033:0x7fd20a7cc799 [ 122.563093][ T6381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.563110][ T6381] RSP: 002b:00007fd209227028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.563141][ T6381] RAX: ffffffffffffffda RBX: 00007fd20aa45fa0 RCX: 00007fd20a7cc799 [ 122.563155][ T6381] RDX: 0000000000000003 RSI: 0000000000000088 RDI: 00002000000040c0 [ 122.563167][ T6381] RBP: 00007fd209227090 R08: 0000000000000000 R09: 0000000000000002 [ 122.563178][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.563189][ T6381] R13: 00007fd20aa46038 R14: 00007fd20aa45fa0 R15: 00007ffc5124dfd8 [ 122.563287][ T6381] [ 122.757596][ T6374] loop3: lost filesystem error report for type 5 error -117 [ 122.760342][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 122.761384][ T6376] set_capacity_and_notify: 4 callbacks suppressed [ 122.761472][ T6376] loop0: detected capacity change from 0 to 1024 [ 122.767655][ C1] EXT4-fs (loop3): initial error at time 1774443600: ext4_orphan_get:1417 [ 122.767680][ C1] EXT4-fs (loop3): last error at time 1774443600: ext4_orphan_get:1417 [ 122.827595][ T6376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 122.836486][ T6376] System zones: 0-1, 3-36 [ 122.844410][ T6376] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.736: bad orphan inode 134217728 [ 122.855625][ T6376] loop0: lost filesystem error report for type 5 error -117 [ 122.880433][ T6383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.957235][ T6391] FAULT_INJECTION: forcing a failure. [ 122.957235][ T6391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.973282][ T6393] lo speed is unknown, defaulting to 1000 [ 122.984435][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.2.741 Not tainted syzkaller #0 PREEMPT(full) [ 122.984522][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.984531][ T6391] Call Trace: [ 122.984536][ T6391] [ 122.984543][ T6391] __dump_stack+0x1d/0x30 [ 122.984566][ T6391] dump_stack_lvl+0x95/0xd0 [ 122.984686][ T6391] dump_stack+0x15/0x1b [ 122.984704][ T6391] should_fail_ex+0x263/0x280 [ 122.984724][ T6391] should_fail+0xb/0x20 [ 122.984750][ T6391] should_fail_usercopy+0x1a/0x20 [ 122.984845][ T6391] copy_fpstate_to_sigframe+0x650/0x7f0 [ 122.984940][ T6391] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 122.985070][ T6391] ? x86_task_fpu+0x36/0x60 [ 122.985137][ T6391] get_sigframe+0x34c/0x470 [ 122.985157][ T6391] ? get_signal+0xdc3/0xf60 [ 122.985243][ T6391] x64_setup_rt_frame+0xa7/0x4e0 [ 122.985266][ T6391] arch_do_signal_or_restart+0x24b/0x450 [ 122.985303][ T6391] exit_to_user_mode_loop+0x6a/0x6f0 [ 122.985325][ T6391] do_syscall_64+0x249/0x370 [ 122.985345][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.985366][ T6391] RIP: 0033:0x7f68cb07cfce [ 122.985390][ T6391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.985404][ T6391] RSP: 002b:00007f68c9b16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.985420][ T6391] RAX: 0000000000000001 RBX: 00007f68c9b176c0 RCX: 00007f68cb07cfce [ 122.985433][ T6391] RDX: 0000000000000001 RSI: 00007f68c9b17090 RDI: 0000000000000004 [ 122.985446][ T6391] RBP: 00007f68c9b17090 R08: 0000000000000000 R09: 0000000000000000 [ 122.985516][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.985528][ T6391] R13: 00007f68cb336038 R14: 00007f68cb335fa0 R15: 00007ffc2272f348 [ 122.985545][ T6391] [ 123.169260][ T6400] FAULT_INJECTION: forcing a failure. [ 123.169260][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 123.181973][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.1.744 Not tainted syzkaller #0 PREEMPT(full) [ 123.182002][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.182013][ T6400] Call Trace: [ 123.182020][ T6400] [ 123.182028][ T6400] __dump_stack+0x1d/0x30 [ 123.182053][ T6400] dump_stack_lvl+0x95/0xd0 [ 123.182089][ T6400] dump_stack+0x15/0x1b [ 123.182108][ T6400] should_fail_ex+0x263/0x280 [ 123.182225][ T6400] should_failslab+0x8c/0xb0 [ 123.182244][ T6400] kmem_cache_alloc_noprof+0x66/0x400 [ 123.182283][ T6400] ? do_getname+0x2e/0x1c0 [ 123.182301][ T6400] do_getname+0x2e/0x1c0 [ 123.182321][ T6400] getname_flags+0x1d/0x30 [ 123.182340][ T6400] do_sys_openat2+0x60/0x130 [ 123.182433][ T6400] __x64_sys_openat+0xf2/0x120 [ 123.182455][ T6400] x64_sys_call+0x1e39/0x3020 [ 123.182476][ T6400] do_syscall_64+0x12c/0x370 [ 123.182517][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.182538][ T6400] RIP: 0033:0x7fc9ba6fcfce [ 123.182553][ T6400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.182570][ T6400] RSP: 002b:00007fc9b9175ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.182658][ T6400] RAX: ffffffffffffffda RBX: 00007fc9b91766c0 RCX: 00007fc9ba6fcfce [ 123.182672][ T6400] RDX: 0000000000000002 RSI: 00007fc9b9175f90 RDI: ffffffffffffff9c [ 123.182684][ T6400] RBP: 00007fc9b9176090 R08: 0000000000000000 R09: 0000000000000000 [ 123.182697][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.182709][ T6400] R13: 00007fc9ba9b6128 R14: 00007fc9ba9b6090 R15: 00007ffd93fd88a8 [ 123.182807][ T6400] [ 123.187534][ T6398] loop3: detected capacity change from 0 to 512 [ 123.215153][ T6397] lo speed is unknown, defaulting to 1000 [ 123.270733][ T6398] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 123.452274][ T6398] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 123.467792][ T6398] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.745: corrupted inode contents [ 123.479567][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 123.479584][ C0] EXT4-fs (loop3): initial error at time 1774443600: mb_free_blocks:2047: inode 11: block 64 [ 123.479615][ C0] EXT4-fs (loop3): last error at time 1774443600: mb_free_blocks:2047: inode 11: block 64 [ 123.509127][ T6398] fserror_report: 6 callbacks suppressed [ 123.509147][ T6398] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.515297][ T6398] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #11: comm syz.3.745: mark_inode_dirty error [ 123.546413][ T6398] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.546590][ T6398] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.745: invalid indirect mapped block 1 (level 1) [ 123.569448][ T6398] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.569681][ T6398] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.745: corrupted inode contents [ 123.591528][ T6398] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.593642][ T6398] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 123.615778][ T6398] loop3: lost filesystem error report for type 5 error -117 [ 123.625736][ T6398] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.745: corrupted inode contents [ 123.655377][ T6398] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.655602][ T6398] EXT4-fs error (device loop3): ext4_truncate:4587: inode #11: comm syz.3.745: mark_inode_dirty error [ 123.687545][ T6398] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.687764][ T6398] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 123.703587][ T6412] FAULT_INJECTION: forcing a failure. [ 123.703587][ T6412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.706138][ T6398] loop3: lost filesystem error report for type 5 error -117 [ 123.719234][ T6398] EXT4-fs (loop3): 1 truncate cleaned up [ 123.770468][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.1.750 Not tainted syzkaller #0 PREEMPT(full) [ 123.770495][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.770505][ T6412] Call Trace: [ 123.770510][ T6412] [ 123.770515][ T6412] __dump_stack+0x1d/0x30 [ 123.770537][ T6412] dump_stack_lvl+0x95/0xd0 [ 123.770633][ T6412] dump_stack+0x15/0x1b [ 123.770692][ T6412] should_fail_ex+0x263/0x280 [ 123.770717][ T6412] should_fail+0xb/0x20 [ 123.770743][ T6412] should_fail_usercopy+0x1a/0x20 [ 123.770788][ T6412] _copy_to_user+0x20/0xa0 [ 123.770815][ T6412] simple_read_from_buffer+0xb5/0x130 [ 123.770841][ T6412] proc_fail_nth_read+0x10e/0x150 [ 123.770868][ T6412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.770940][ T6412] vfs_read+0x1ab/0x7f0 [ 123.770965][ T6412] ? __rcu_read_unlock+0x4e/0x70 [ 123.771052][ T6412] ? __fget_files+0x184/0x1c0 [ 123.771139][ T6412] ? mutex_lock+0x57/0x90 [ 123.771242][ T6412] ksys_read+0xdc/0x1a0 [ 123.771258][ T6412] __x64_sys_read+0x40/0x50 [ 123.771318][ T6412] x64_sys_call+0x2886/0x3020 [ 123.771342][ T6412] do_syscall_64+0x12c/0x370 [ 123.771399][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.771419][ T6412] RIP: 0033:0x7fc9ba6fcfce [ 123.771440][ T6412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.771457][ T6412] RSP: 002b:00007fc9b9196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.771478][ T6412] RAX: ffffffffffffffda RBX: 00007fc9b91976c0 RCX: 00007fc9ba6fcfce [ 123.771564][ T6412] RDX: 000000000000000f RSI: 00007fc9b91970a0 RDI: 0000000000000004 [ 123.771577][ T6412] RBP: 00007fc9b9197090 R08: 0000000000000000 R09: 0000000000000000 [ 123.771587][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.771621][ T6412] R13: 00007fc9ba9b6038 R14: 00007fc9ba9b5fa0 R15: 00007ffd93fd88a8 [ 123.771639][ T6412] [ 123.793314][ T6422] tipc: Started in network mode [ 123.793325][ T6422] tipc: Node identity , cluster identity 4711 [ 123.793336][ T6422] tipc: Failed to set node id, please configure manually [ 123.793406][ T6422] tipc: Enabling of bearer rejected, failed to enable media [ 123.932877][ T6434] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.745: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 124.091607][ T6438] netlink: 'syz.4.754': attribute type 2 has an invalid length. [ 124.216927][ T6438] can0: slcan on ttyS3. [ 124.611239][ T6418] can0 (unregistered): slcan off ttyS3. [ 124.800948][ T6491] loop3: detected capacity change from 0 to 512 [ 124.820958][ T6491] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.837371][ T6491] EXT4-fs (loop3): 1 truncate cleaned up [ 125.623213][ T6492] SELinux: failed to load policy [ 125.817949][ T6501] loop1: detected capacity change from 0 to 512 [ 125.847521][ T6501] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 125.918429][ T6501] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 125.941243][ T3316] EXT4-fs unmount: 14 callbacks suppressed [ 125.941260][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.956045][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 125.956062][ C0] EXT4-fs (loop1): initial error at time 1774443603: mb_free_blocks:2047: inode 11: block 64 [ 125.956112][ C0] EXT4-fs (loop1): last error at time 1774443603: mb_free_blocks:2047: inode 11: block 64 [ 126.009948][ T6514] loop4: detected capacity change from 0 to 267 [ 126.020045][ T6501] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.769: corrupted inode contents [ 126.046302][ T6517] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.062342][ T6501] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.062556][ T6501] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #11: comm syz.1.769: mark_inode_dirty error [ 126.083388][ T6501] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.083678][ T6501] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.769: invalid indirect mapped block 1 (level 1) [ 126.149234][ T28] kauditd_printk_skb: 231 callbacks suppressed [ 126.149254][ T28] audit: type=1400 audit(1774443603.514:810): avc: denied { ioctl } for pid=6523 comm="syz.3.773" path="socket:[13812]" dev="sockfs" ino=13812 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.183959][ T6501] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.184180][ T6501] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.769: corrupted inode contents [ 126.222228][ T6511] loop0: detected capacity change from 0 to 1024 [ 126.242241][ T28] audit: type=1400 audit(1774443603.554:811): avc: denied { read } for pid=6516 comm="syz.2.775" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.325632][ T6501] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.326840][ T6524] netlink: 'syz.3.773': attribute type 2 has an invalid length. [ 126.346280][ T6501] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 126.351698][ T6511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 126.368731][ T6511] System zones: 0-1, 3-36 [ 126.376874][ T6524] netlink: 14 bytes leftover after parsing attributes in process `syz.3.773'. [ 126.386858][ T6501] loop1: lost filesystem error report for type 5 error -117 [ 126.387088][ T6501] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.769: corrupted inode contents [ 126.414081][ T6511] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.772: bad orphan inode 134217728 [ 126.429742][ T6501] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.769: mark_inode_dirty error [ 126.447807][ T6511] loop0: lost filesystem error report for type 5 error -117 [ 126.450349][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 126.464126][ C1] EXT4-fs (loop0): initial error at time 1774443603: ext4_orphan_get:1417 [ 126.472656][ C1] EXT4-fs (loop0): last error at time 1774443603: ext4_orphan_get:1417 [ 126.487674][ T6501] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 126.487689][ T6511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.519320][ T6501] loop1: lost filesystem error report for type 5 error -117 [ 126.526332][ T6501] EXT4-fs (loop1): 1 truncate cleaned up [ 126.580723][ T6501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.862692][ T6538] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.769: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 127.090610][ T6540] netlink: 2 bytes leftover after parsing attributes in process `syz.2.778'. [ 127.109851][ T6540] batadv_slave_1: entered promiscuous mode [ 127.158623][ T6541] loop4: detected capacity change from 0 to 8192 [ 127.243669][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.442721][ T6553] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 127.483475][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.530273][ T6555] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 127.615223][ T6555] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 127.672805][ T6561] loop0: detected capacity change from 0 to 1024 [ 127.714689][ T6550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 127.872526][ T6561] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.959139][ T6561] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 128.038082][ T6550] macvlan2: entered promiscuous mode [ 128.049998][ T6550] macvlan2: entered allmulticast mode [ 128.075849][ T6564] loop1: detected capacity change from 0 to 4096 [ 128.084384][ T6550] bond5: entered promiscuous mode [ 128.091203][ T6561] EXT4-fs (loop0): invalid journal inode [ 128.097415][ T6561] EXT4-fs (loop0): can't get journal size [ 128.098355][ T6550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.137376][ T6561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.226462][ T6550] bond5: left promiscuous mode [ 128.260968][ T6564] EXT4-fs: Ignoring removed bh option [ 128.291469][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.786'. [ 128.306738][ T6564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.502267][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.511650][ T6577] FAULT_INJECTION: forcing a failure. [ 128.511650][ T6577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.544490][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.3.787 Not tainted syzkaller #0 PREEMPT(full) [ 128.544585][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.544594][ T6577] Call Trace: [ 128.544600][ T6577] [ 128.544607][ T6577] __dump_stack+0x1d/0x30 [ 128.544680][ T6577] dump_stack_lvl+0x95/0xd0 [ 128.544701][ T6577] dump_stack+0x15/0x1b [ 128.544718][ T6577] should_fail_ex+0x263/0x280 [ 128.544741][ T6577] should_fail+0xb/0x20 [ 128.544810][ T6577] should_fail_usercopy+0x1a/0x20 [ 128.544829][ T6577] strncpy_from_user+0x27/0x250 [ 128.544846][ T6577] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 128.544884][ T6577] do_getname+0x59/0x1c0 [ 128.544902][ T6577] getname_flags+0x1d/0x30 [ 128.544962][ T6577] do_sys_openat2+0x60/0x130 [ 128.544983][ T6577] __x64_sys_openat+0xf2/0x120 [ 128.545047][ T6577] x64_sys_call+0x1e39/0x3020 [ 128.545071][ T6577] do_syscall_64+0x12c/0x370 [ 128.545149][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.545166][ T6577] RIP: 0033:0x7ff61dc5cfce [ 128.545179][ T6577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.545231][ T6577] RSP: 002b:00007ff61c6f4ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.545247][ T6577] RAX: ffffffffffffffda RBX: 00007ff61c6f76c0 RCX: 00007ff61dc5cfce [ 128.545258][ T6577] RDX: 0000000000000002 RSI: 00007ff61dd31f90 RDI: ffffffffffffff9c [ 128.545268][ T6577] RBP: 00007ff61c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.545278][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 128.545291][ T6577] R13: 0000200000001a40 R14: 0000000000000005 R15: 00007ffd82e9faf8 [ 128.545329][ T6577] [ 128.876401][ T6587] loop4: detected capacity change from 0 to 8192 [ 128.952082][ T6582] loop1: detected capacity change from 0 to 1024 [ 128.983049][ T6592] netlink: 96 bytes leftover after parsing attributes in process `syz.2.794'. [ 128.992233][ T6582] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 129.001803][ T6582] System zones: 0-1, 3-36 [ 129.017528][ T6582] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.791: bad orphan inode 134217728 [ 129.029236][ T6582] loop1: lost filesystem error report for type 5 error -117 [ 129.031432][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 129.046014][ C1] EXT4-fs (loop1): initial error at time 1774443606: ext4_orphan_get:1417 [ 129.054978][ C1] EXT4-fs (loop1): last error at time 1774443606: ext4_orphan_get:1417 [ 129.073065][ T6582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.109679][ T6601] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 129.216895][ T6601] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 129.327035][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.798'. [ 129.440553][ T6601] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 129.470579][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.478505][ T6609] macvlan2: entered promiscuous mode [ 129.500701][ T6609] macvlan2: entered allmulticast mode [ 129.506985][ T6609] bond5: entered promiscuous mode [ 129.544191][ T6609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.600876][ T6613] loop3: detected capacity change from 0 to 128 [ 129.670859][ T6609] bond5: left promiscuous mode [ 129.906378][ T6618] loop4: detected capacity change from 0 to 8192 [ 129.969633][ T6622] loop1: detected capacity change from 0 to 1024 [ 130.244507][ T6628] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 130.367861][ T28] audit: type=1400 audit(1774443607.734:812): avc: denied { remount } for pid=6630 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.461078][ T6634] loop3: detected capacity change from 0 to 8192 [ 130.480459][ T6635] veth0_virt_wifi: entered promiscuous mode [ 130.635083][ T6642] FAULT_INJECTION: forcing a failure. [ 130.635083][ T6642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.648417][ T6642] CPU: 1 UID: 0 PID: 6642 Comm: syz.3.807 Not tainted syzkaller #0 PREEMPT(full) [ 130.648443][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.648454][ T6642] Call Trace: [ 130.648459][ T6642] [ 130.648465][ T6642] __dump_stack+0x1d/0x30 [ 130.648568][ T6642] dump_stack_lvl+0x95/0xd0 [ 130.648590][ T6642] dump_stack+0x15/0x1b [ 130.648607][ T6642] should_fail_ex+0x263/0x280 [ 130.648627][ T6642] should_fail+0xb/0x20 [ 130.648709][ T6642] should_fail_usercopy+0x1a/0x20 [ 130.648733][ T6642] _copy_from_user+0x1c/0xb0 [ 130.648755][ T6642] ___sys_sendmsg+0xc1/0x1e0 [ 130.648812][ T6642] __x64_sys_sendmsg+0xd4/0x160 [ 130.648840][ T6642] x64_sys_call+0x194c/0x3020 [ 130.648862][ T6642] do_syscall_64+0x12c/0x370 [ 130.648888][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.648964][ T6642] RIP: 0033:0x7ff61dc9c799 [ 130.649029][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.649044][ T6642] RSP: 002b:00007ff61c6d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.649061][ T6642] RAX: ffffffffffffffda RBX: 00007ff61df16090 RCX: 00007ff61dc9c799 [ 130.649139][ T6642] RDX: 000000003000c085 RSI: 0000200000000940 RDI: 0000000000000008 [ 130.649150][ T6642] RBP: 00007ff61c6d6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.649160][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.649184][ T6642] R13: 00007ff61df16128 R14: 00007ff61df16090 R15: 00007ffd82e9faf8 [ 130.649198][ T6642] [ 130.664957][ T6641] netlink: 96 bytes leftover after parsing attributes in process `syz.1.808'. [ 130.928155][ T6648] loop3: detected capacity change from 0 to 1024 [ 130.956064][ T6655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'. [ 130.983742][ T6648] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 130.993803][ T6648] System zones: 0-1, 3-36 [ 131.001792][ T6648] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.810: bad orphan inode 134217728 [ 131.013384][ T6648] loop3: lost filesystem error report for type 5 error -117 [ 131.017020][ T6648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.039911][ T6655] loop1: detected capacity change from 0 to 128 [ 131.053816][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 131.063586][ T28] audit: type=1400 audit(1774443608.414:813): avc: denied { remount } for pid=6654 comm="syz.1.812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 131.174030][ T28] audit: type=1400 audit(1774443608.544:814): avc: denied { read } for pid=6654 comm="syz.1.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.701090][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.749204][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'. [ 131.766276][ T6666] netlink: 830 bytes leftover after parsing attributes in process `syz.3.814'. [ 131.906986][ T6671] loop1: detected capacity change from 0 to 8192 [ 131.980668][ T28] audit: type=1400 audit(1774443609.324:815): avc: denied { watch watch_reads } for pid=6670 comm="syz.1.815" path=2F3137302F2E02 dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 132.186581][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.251302][ T28] audit: type=1400 audit(1774443609.624:816): avc: denied { create } for pid=6691 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.284038][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 132.291256][ T28] audit: type=1400 audit(1774443609.624:817): avc: denied { bind } for pid=6691 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.297085][ T6694] netlink: 96 bytes leftover after parsing attributes in process `syz.0.823'. [ 132.392652][ T6700] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 132.443415][ T6702] netlink: 'syz.0.826': attribute type 21 has an invalid length. [ 132.451230][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 132.482113][ T28] audit: type=1326 audit(1774443609.854:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 132.506934][ T28] audit: type=1326 audit(1774443609.854:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 132.536237][ T28] audit: type=1326 audit(1774443609.854:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 132.560563][ T28] audit: type=1326 audit(1774443609.854:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 132.584948][ T28] audit: type=1326 audit(1774443609.854:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 132.609158][ T28] audit: type=1326 audit(1774443609.904:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 132.701272][ T3504] IPVS: starting estimator thread 0... [ 132.715704][ T6702] ext3: Unknown parameter 'fsmagic' [ 132.731595][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.750631][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.790525][ T6707] IPVS: using max 2400 ests per chain, 120000 per kthread [ 132.797402][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.807884][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.355089][ T6729] set_capacity_and_notify: 2 callbacks suppressed [ 133.355104][ T6729] loop3: detected capacity change from 0 to 1024 [ 133.469794][ T6730] bridge1: left promiscuous mode [ 133.618404][ T6729] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 133.726706][ T6735] SELinux: policydb magic number 0x600 does not match expected magic number 0xf97cff8c [ 133.748355][ T6729] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 133.778997][ T6735] SELinux: failed to load policy [ 133.841545][ T6729] EXT4-fs (loop3): invalid journal inode [ 133.882528][ T6729] EXT4-fs (loop3): can't get journal size [ 133.946039][ T6729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.812727][ T6744] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 135.007620][ T6749] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.183016][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.839'. [ 135.214859][ T6749] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 135.293106][ T6744] macvlan3: entered promiscuous mode [ 135.309237][ T6744] macvlan3: entered allmulticast mode [ 135.328600][ T6744] bond3: entered promiscuous mode [ 135.349266][ T6744] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 135.374611][ T6744] bond3: left promiscuous mode [ 136.131367][ T6774] loop1: detected capacity change from 0 to 512 [ 136.142236][ T6774] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 136.242206][ T6774] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 136.260347][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 136.266926][ C0] EXT4-fs (loop1): initial error at time 1774443613: mb_free_blocks:2047: inode 11: block 64 [ 136.270433][ T6774] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.848: corrupted inode contents [ 136.277526][ C0] EXT4-fs (loop1): last error at time 1774443613: mb_free_blocks:2047: inode 11: block 64 [ 136.352818][ T6780] lo speed is unknown, defaulting to 1000 [ 136.358594][ T6780] lo speed is unknown, defaulting to 1000 [ 136.364780][ T6780] lo speed is unknown, defaulting to 1000 [ 136.372217][ T6780] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.432282][ T6781] lo speed is unknown, defaulting to 1000 [ 136.439191][ T6781] lo speed is unknown, defaulting to 1000 [ 136.601574][ T6780] lo speed is unknown, defaulting to 1000 [ 136.607804][ T6780] lo speed is unknown, defaulting to 1000 [ 136.614082][ T6780] lo speed is unknown, defaulting to 1000 [ 136.620185][ T6780] lo speed is unknown, defaulting to 1000 [ 136.626433][ T6780] lo speed is unknown, defaulting to 1000 [ 136.692134][ T6774] fserror_report: 2 callbacks suppressed [ 136.692148][ T6774] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.698086][ T6774] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #11: comm syz.1.848: mark_inode_dirty error [ 136.721259][ T6774] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.722071][ T6774] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.848: invalid indirect mapped block 1 (level 1) [ 136.756994][ T6774] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.758110][ T6774] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.848: corrupted inode contents [ 136.785083][ T6786] loop0: detected capacity change from 0 to 512 [ 136.792157][ T6786] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 136.800701][ T6774] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.801404][ T6774] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 136.820223][ T6786] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 136.830359][ T6774] loop1: lost filesystem error report for type 5 error -117 [ 136.837876][ T6786] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.851: corrupted inode contents [ 136.850327][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 136.857281][ T6774] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.848: corrupted inode contents [ 136.863366][ C0] EXT4-fs (loop0): initial error at time 1774443614: mb_free_blocks:2047: inode 11: block 64 [ 136.863400][ C0] EXT4-fs (loop0): last error at time 1774443614: mb_free_blocks:2047: inode 11: block 64 [ 136.900177][ T6786] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.900404][ T6786] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #11: comm syz.0.851: mark_inode_dirty error [ 136.925371][ T6774] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.925502][ T6774] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.848: mark_inode_dirty error [ 136.946155][ T6786] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.946379][ T6786] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.851: invalid indirect mapped block 1 (level 1) [ 136.971485][ T6774] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.971670][ T6774] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 136.989900][ T6786] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.990098][ T6786] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.851: corrupted inode contents [ 137.013098][ T6786] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.013305][ T6786] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 137.040454][ T6786] loop0: lost filesystem error report for type 5 error -117 [ 137.080392][ T6774] loop1: lost filesystem error report for type 5 error -117 [ 137.088608][ T6786] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.851: corrupted inode contents [ 137.090526][ T6774] EXT4-fs (loop1): 1 truncate cleaned up [ 137.118132][ T6786] EXT4-fs error (device loop0): ext4_truncate:4587: inode #11: comm syz.0.851: mark_inode_dirty error [ 137.133939][ T6774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.150001][ T6786] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 137.163233][ T6793] netlink: 'syz.4.854': attribute type 1 has an invalid length. [ 137.163783][ T6786] loop0: lost filesystem error report for type 5 error -117 [ 137.174129][ T6786] EXT4-fs (loop0): 1 truncate cleaned up [ 137.187898][ T6786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.212119][ T6793] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 137.223081][ T6793] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 137.335236][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.854'. [ 137.359026][ T6796] macvlan3: entered promiscuous mode [ 137.388436][ T6796] macvlan3: entered allmulticast mode [ 137.418317][ T6796] bond8: entered promiscuous mode [ 137.445791][ T6796] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 137.470461][ T6798] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.848: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 137.523416][ T6796] bond8: left promiscuous mode [ 137.751881][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.891224][ T6807] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.851: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 138.230385][ T28] kauditd_printk_skb: 203 callbacks suppressed [ 138.230398][ T28] audit: type=1400 audit(1774443615.584:1027): avc: denied { connect } for pid=6802 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.258009][ T6811] lo speed is unknown, defaulting to 1000 [ 138.266662][ T6811] lo speed is unknown, defaulting to 1000 [ 138.351514][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.415711][ T6815] netlink: 108 bytes leftover after parsing attributes in process `syz.4.858'. [ 138.428674][ T6814] FAULT_INJECTION: forcing a failure. [ 138.428674][ T6814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.491648][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.3.857 Not tainted syzkaller #0 PREEMPT(full) [ 138.491671][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.491680][ T6814] Call Trace: [ 138.491685][ T6814] [ 138.491692][ T6814] __dump_stack+0x1d/0x30 [ 138.491785][ T6814] dump_stack_lvl+0x95/0xd0 [ 138.491804][ T6814] dump_stack+0x15/0x1b [ 138.491821][ T6814] should_fail_ex+0x263/0x280 [ 138.491842][ T6814] should_fail+0xb/0x20 [ 138.491916][ T6814] should_fail_usercopy+0x1a/0x20 [ 138.491936][ T6814] _copy_from_iter+0xcf/0xea0 [ 138.492039][ T6814] ? __alloc_skb+0x4f6/0x690 [ 138.492061][ T6814] ? __alloc_skb+0x200/0x690 [ 138.492144][ T6814] netlink_sendmsg+0x4ae/0x6f0 [ 138.492169][ T6814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.492191][ T6814] ____sys_sendmsg+0x563/0x5b0 [ 138.492234][ T6814] ___sys_sendmsg+0x195/0x1e0 [ 138.492264][ T6814] __x64_sys_sendmsg+0xd4/0x160 [ 138.492287][ T6814] x64_sys_call+0x194c/0x3020 [ 138.492313][ T6814] do_syscall_64+0x12c/0x370 [ 138.492393][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.492410][ T6814] RIP: 0033:0x7ff61dc9c799 [ 138.492422][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.492444][ T6814] RSP: 002b:00007ff61c6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.492512][ T6814] RAX: ffffffffffffffda RBX: 00007ff61df15fa0 RCX: 00007ff61dc9c799 [ 138.492524][ T6814] RDX: 00000000440088c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 138.492535][ T6814] RBP: 00007ff61c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.492603][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.492614][ T6814] R13: 00007ff61df16038 R14: 00007ff61df15fa0 R15: 00007ffd82e9faf8 [ 138.492631][ T6814] [ 138.745155][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.830676][ T6830] random: crng reseeded on system resumption [ 139.069319][ T6839] cgroup: fork rejected by pids controller in /syz2 [ 139.469430][ T7161] loop3: detected capacity change from 0 to 1024 [ 139.486252][ T7161] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 139.512929][ T7161] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 139.554289][ T7161] EXT4-fs (loop3): invalid journal inode [ 139.577285][ T7161] EXT4-fs (loop3): can't get journal size [ 139.598439][ T7161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.720811][ T7179] loop1: detected capacity change from 0 to 8192 [ 139.897785][ T7246] loop4: detected capacity change from 0 to 512 [ 139.936987][ T7246] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 139.978111][ T7253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.876'. [ 139.988980][ T7246] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 140.004328][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 140.013192][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 140.013207][ C0] EXT4-fs (loop4): initial error at time 1774443617: mb_free_blocks:2047: inode 11: block 64 [ 140.013234][ C0] EXT4-fs (loop4): last error at time 1774443617: mb_free_blocks:2047: inode 11: block 64 [ 140.041355][ T7246] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #11: comm syz.4.872: corrupted inode contents [ 140.056511][ T7256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.877'. [ 140.067761][ T7246] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #11: comm syz.4.872: mark_inode_dirty error [ 140.079675][ T7246] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.872: invalid indirect mapped block 1 (level 1) [ 140.111048][ T7253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.876'. [ 140.129100][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 140.138175][ T7246] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #11: comm syz.4.872: corrupted inode contents [ 140.150579][ T7246] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 140.174280][ T7246] loop4: lost filesystem error report for type 5 error -117 [ 140.174487][ T7246] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #11: comm syz.4.872: corrupted inode contents [ 140.202207][ T7246] EXT4-fs error (device loop4): ext4_truncate:4587: inode #11: comm syz.4.872: mark_inode_dirty error [ 140.214284][ T7246] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 140.224166][ T7246] loop4: lost filesystem error report for type 5 error -117 [ 140.224350][ T7246] EXT4-fs (loop4): 1 truncate cleaned up [ 140.238854][ T7246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.358155][ T7246] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.872: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 140.420444][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.591629][ T7275] loop1: detected capacity change from 0 to 8192 [ 140.955191][ T28] audit: type=1400 audit(1774443618.324:1028): avc: denied { watch watch_reads } for pid=7279 comm="syz.2.885" path="/187/file0" dev="tmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.197939][ T28] audit: type=1400 audit(1774443618.324:1029): avc: denied { create } for pid=7279 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 141.421245][ T7291] loop0: detected capacity change from 0 to 256 [ 141.436857][ T7292] loop4: detected capacity change from 0 to 1024 [ 141.473475][ T7291] FAT-fs (loop0): Directory bread(block 64) failed [ 141.487983][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'. [ 141.510506][ T7291] FAT-fs (loop0): Directory bread(block 65) failed [ 141.527305][ T7296] loop1: detected capacity change from 0 to 256 [ 141.530400][ T7291] FAT-fs (loop0): Directory bread(block 66) failed [ 141.540782][ T7291] FAT-fs (loop0): Directory bread(block 67) failed [ 141.547376][ T7291] FAT-fs (loop0): Directory bread(block 68) failed [ 141.560373][ T7291] FAT-fs (loop0): Directory bread(block 69) failed [ 141.567007][ T7291] FAT-fs (loop0): Directory bread(block 70) failed [ 141.596212][ T7291] FAT-fs (loop0): Directory bread(block 71) failed [ 141.605301][ T7300] loop1: detected capacity change from 0 to 512 [ 141.620401][ T7291] FAT-fs (loop0): Directory bread(block 72) failed [ 141.640387][ T7291] FAT-fs (loop0): Directory bread(block 73) failed [ 141.678805][ T7300] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 141.748359][ T7291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.889'. [ 141.769223][ T7300] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 141.800456][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 141.807526][ C0] EXT4-fs (loop1): initial error at time 1774443619: mb_free_blocks:2047: inode 11: block 64 [ 141.818347][ C0] EXT4-fs (loop1): last error at time 1774443619: mb_free_blocks:2047: inode 11: block 64 [ 141.833957][ T28] audit: type=1400 audit(1774443619.204:1030): avc: denied { read } for pid=7289 comm="syz.0.889" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.960393][ T7300] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.892: corrupted inode contents [ 141.973794][ T7304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.893'. [ 141.983285][ T7300] fserror_report: 8 callbacks suppressed [ 141.983298][ T7300] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.005432][ T7300] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #11: comm syz.1.892: mark_inode_dirty error [ 142.063193][ T7300] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.063450][ T7300] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.892: invalid indirect mapped block 1 (level 1) [ 142.087158][ T7300] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.100156][ T7300] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.892: corrupted inode contents [ 142.121577][ T7300] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.121898][ T7300] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 142.122677][ T7313] tipc: Started in network mode [ 142.131436][ T7300] loop1: lost filesystem error report for type 5 error -117 [ 142.139813][ T7313] tipc: Node identity , cluster identity 4711 [ 142.160814][ T7313] tipc: Failed to set node id, please configure manually [ 142.165126][ T7300] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.892: corrupted inode contents [ 142.168137][ T7313] tipc: Enabling of bearer rejected, failed to enable media [ 142.199613][ T7313] netlink: 'syz.4.896': attribute type 2 has an invalid length. [ 142.210718][ T7300] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.210920][ T7300] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.892: mark_inode_dirty error [ 142.269402][ T7300] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.270366][ T7300] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 142.288720][ T7300] loop1: lost filesystem error report for type 5 error -117 [ 142.288923][ T7300] EXT4-fs (loop1): 1 truncate cleaned up [ 142.303676][ T7313] can0: slcan on ttyS3. [ 142.311798][ T7300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.400942][ T7312] can0 (unregistered): slcan off ttyS3. [ 142.429213][ T7320] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.892: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 142.511877][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.645707][ T7325] loop1: detected capacity change from 0 to 8192 [ 142.900969][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.961818][ T7347] FAULT_INJECTION: forcing a failure. [ 142.961818][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 143.010540][ T7347] CPU: 1 UID: 0 PID: 7347 Comm: syz.0.903 Not tainted syzkaller #0 PREEMPT(full) [ 143.010627][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.010636][ T7347] Call Trace: [ 143.010641][ T7347] [ 143.010647][ T7347] __dump_stack+0x1d/0x30 [ 143.010720][ T7347] dump_stack_lvl+0x95/0xd0 [ 143.010737][ T7347] dump_stack+0x15/0x1b [ 143.010765][ T7347] should_fail_ex+0x263/0x280 [ 143.010786][ T7347] ? __se_sys_memfd_create+0x1df/0x3b0 [ 143.010809][ T7347] should_failslab+0x8c/0xb0 [ 143.010865][ T7347] __kmalloc_cache_noprof+0x5f/0x410 [ 143.010905][ T7347] __se_sys_memfd_create+0x1df/0x3b0 [ 143.011125][ T7347] __x64_sys_memfd_create+0x31/0x40 [ 143.011150][ T7347] x64_sys_call+0x1f22/0x3020 [ 143.011174][ T7347] do_syscall_64+0x12c/0x370 [ 143.011246][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.011267][ T7347] RIP: 0033:0x7f2e631dc799 [ 143.011282][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.011371][ T7347] RSP: 002b:00007f2e61c2ed58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 143.011391][ T7347] RAX: ffffffffffffffda RBX: 000000000000407c RCX: 00007f2e631dc799 [ 143.011404][ T7347] RDX: 00007f2e61c2eddc RSI: 0000000000000000 RDI: 00007f2e63272e79 [ 143.011418][ T7347] RBP: 0000200000008140 R08: 00000000ffffffff R09: 0000000000000000 [ 143.011521][ T7347] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 143.011533][ T7347] R13: 00007f2e61c2eddc R14: 00007f2e61c2ede0 R15: 00007ffe691114b8 [ 143.011551][ T7347] [ 143.195709][ T7361] netlink: 168 bytes leftover after parsing attributes in process `syz.0.904'. [ 143.251335][ T7367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.906'. [ 143.297452][ T7370] tipc: Failed to remove unknown binding: 66,1,1/0:4182441931/4182441933 [ 143.582377][ T7372] netlink: 96 bytes leftover after parsing attributes in process `syz.1.907'. [ 143.828543][ T7379] loop0: detected capacity change from 0 to 1024 [ 143.842412][ T7384] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 143.914767][ T7384] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 143.930825][ T7387] siw: device registration error -23 [ 143.960059][ T7387] lo speed is unknown, defaulting to 1000 [ 143.966608][ T7387] lo speed is unknown, defaulting to 1000 [ 144.080463][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 144.087017][ C1] EXT4-fs (loop4): initial error at time 1774443621: mb_free_blocks:2047: inode 11: block 64 [ 144.098015][ C1] EXT4-fs (loop4): last error at time 1774443621: mb_free_blocks:2047: inode 11: block 64 [ 144.135039][ T7384] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #11: comm syz.4.910: corrupted inode contents [ 144.160691][ T7384] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.160931][ T7384] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #11: comm syz.4.910: mark_inode_dirty error [ 144.214338][ T7384] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.215352][ T7384] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.910: invalid indirect mapped block 1 (level 1) [ 144.269083][ T7384] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.269308][ T7384] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #11: comm syz.4.910: corrupted inode contents [ 144.292395][ T7384] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.292661][ T7384] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 144.310674][ T7384] loop4: lost filesystem error report for type 5 error -117 [ 144.310883][ T7384] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #11: comm syz.4.910: corrupted inode contents [ 144.330510][ T7384] EXT4-fs error (device loop4): ext4_truncate:4587: inode #11: comm syz.4.910: mark_inode_dirty error [ 144.342094][ T7384] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 144.351245][ T7384] loop4: lost filesystem error report for type 5 error -117 [ 144.351414][ T7384] EXT4-fs (loop4): 1 truncate cleaned up [ 144.364856][ T7384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.380172][ T7384] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.910: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 144.414857][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.577352][ T28] audit: type=1326 audit(1774443621.944:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x0 [ 145.197522][ T7412] ±ÿ: renamed from lo (while UP) [ 145.249642][ T7413] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.921'. [ 145.258998][ T7413] netlink: zone id is out of range [ 145.269632][ T7413] netlink: zone id is out of range [ 145.599614][ T28] audit: type=1400 audit(1774443622.964:1032): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.939436][ T7421] siw: device registration error -23 [ 145.956981][ T7421] lo speed is unknown, defaulting to 1000 [ 145.963133][ T7421] lo speed is unknown, defaulting to 1000 [ 146.304010][ T7425] IPVS: Error connecting to the multicast addr [ 146.801377][ T7443] lo speed is unknown, defaulting to 1000 [ 146.808332][ T7443] lo speed is unknown, defaulting to 1000 [ 147.583596][ T7450] set_capacity_and_notify: 2 callbacks suppressed [ 147.583612][ T7450] loop4: detected capacity change from 0 to 512 [ 147.633825][ T7450] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.719417][ T7450] EXT4-fs (loop4): 1 truncate cleaned up [ 147.741464][ T7450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.968584][ T7454] loop3: detected capacity change from 0 to 256 [ 147.981796][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.180011][ T7460] loop3: detected capacity change from 0 to 8192 [ 148.457368][ T7462] cgroup: fork rejected by pids controller in /syz3 [ 148.680681][ T7650] syz.1.939 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 148.871521][ T7649] syz.1.939 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 148.963161][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 148.992655][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.1.939 Not tainted syzkaller #0 PREEMPT(full) [ 148.992692][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.992701][ T7649] Call Trace: [ 148.992706][ T7649] [ 148.992713][ T7649] __dump_stack+0x1d/0x30 [ 148.992735][ T7649] dump_stack_lvl+0x95/0xd0 [ 148.992752][ T7649] dump_stack+0x15/0x1b [ 148.992810][ T7649] dump_header+0x80/0x240 [ 148.992828][ T7649] oom_kill_process+0x295/0x350 [ 148.992848][ T7649] out_of_memory+0x97d/0xb80 [ 148.992867][ T7649] try_charge_memcg+0x62e/0xa10 [ 148.992948][ T7649] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 148.992976][ T7649] __swap_cache_prepare_and_add+0x386/0x530 [ 148.993009][ T7649] swap_cache_alloc_folio+0xa2/0x120 [ 148.993035][ T7649] swap_cluster_readahead+0x26e/0x3d0 [ 148.993115][ T7649] swapin_readahead+0xde/0x840 [ 148.993139][ T7649] ? __rcu_read_unlock+0x4e/0x70 [ 148.993159][ T7649] ? __perf_event_task_sched_in+0xa65/0xad0 [ 148.993181][ T7649] ? __list_add_valid_or_report+0x38/0xe0 [ 148.993322][ T7649] ? __rcu_read_unlock+0x4e/0x70 [ 148.993353][ T7649] ? swap_cache_get_folio+0x26f/0x280 [ 148.993377][ T7649] do_swap_page+0x30d/0x2220 [ 148.993399][ T7649] ? __schedule+0x93c/0xd40 [ 148.993464][ T7649] ? __rcu_read_lock+0x36/0x50 [ 148.993478][ T7649] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 148.993540][ T7649] handle_mm_fault+0xb46/0x3020 [ 148.993562][ T7649] ? vma_start_read+0x1c7/0x2c0 [ 148.993586][ T7649] do_user_addr_fault+0x62f/0x1050 [ 148.993653][ T7649] ? trace_page_fault_user+0x1f/0xe0 [ 148.993675][ T7649] exc_page_fault+0x62/0xa0 [ 148.993752][ T7649] asm_exc_page_fault+0x26/0x30 [ 148.993769][ T7649] RIP: 0033:0x7fc9ba60a14c [ 148.993785][ T7649] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 148.993834][ T7649] RSP: 002b:00007ffd93fd8a10 EFLAGS: 00010202 [ 148.993848][ T7649] RAX: 0000000000000000 RBX: 00007fc9ba9b5fa0 RCX: 0000555579654808 [ 148.993859][ T7649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.993870][ T7649] RBP: 00007fc9ba9b7da0 R08: 0000000000000000 R09: 0000000000000000 [ 148.993880][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000247f1 [ 148.993897][ T7649] R13: 00007fc9ba9b609c R14: 0000000000024525 R15: 00007fc9ba9b6090 [ 148.993961][ T7649] [ 149.034574][ T7649] memory: usage 180328kB, limit 307200kB, failcnt 133 [ 149.270386][ T7649] memory+swap: usage 76272kB, limit 9007199254740988kB, failcnt 0 [ 149.278360][ T7649] kmem: usage 78360kB, limit 9007199254740988kB, failcnt 0 [ 149.330343][ T7649] Memory cgroup stats for /syz1: [ 149.330528][ T7649] cache 4096 [ 149.338689][ T7649] rss 16384 [ 149.384585][ T7649] shmem 0 [ 149.387583][ T7649] mapped_file 4096 [ 149.394671][ T7649] dirty 0 [ 149.400349][ T7649] writeback 0 [ 149.403641][ T7649] workingset_refault_anon 3 [ 149.415096][ T7649] workingset_refault_file 0 [ 149.445397][ T7649] swap 176128 [ 149.448705][ T7649] swapcached 200704 [ 149.459252][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.466459][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.468965][ T7649] pgpgin 129286 [ 149.490437][ T7649] pgpgout 129278 [ 149.497031][ T7649] pgfault 130525 [ 149.504079][ T7649] pgmajfault 6 [ 149.504546][ T7717] team0: left promiscuous mode [ 149.507447][ T7649] inactive_anon 0 [ 149.507456][ T7649] active_anon 24576 [ 149.507462][ T7649] inactive_file 0 [ 149.507469][ T7649] active_file 8192 [ 149.507475][ T7649] unevictable 0 [ 149.533509][ T7717] team_slave_0: left promiscuous mode [ 149.549152][ T7717] team_slave_1: left promiscuous mode [ 149.557569][ T7649] hierarchical_memory_limit 314572800 [ 149.569858][ T7649] hierarchical_memsw_limit 9223372036854771712 [ 149.582039][ T7649] total_cache 4096 [ 149.590153][ T7649] total_rss 16384 [ 149.597478][ T7649] total_shmem 0 [ 149.604309][ T7649] total_mapped_file 4096 [ 149.612659][ T7717] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 149.613477][ T7649] total_dirty 0 [ 149.656683][ T7649] total_writeback 0 [ 149.672426][ T7649] total_workingset_refault_anon 3 [ 149.677585][ T7649] total_workingset_refault_file 0 [ 149.692928][ T7649] total_swap 176128 [ 149.703043][ T7649] total_swapcached 200704 [ 149.710497][ T7649] total_pgpgin 129286 [ 149.731552][ T7649] total_pgpgout 129278 [ 149.738862][ T7779] loop4: detected capacity change from 0 to 8192 [ 149.740591][ T7649] total_pgfault 130525 [ 149.759628][ T7649] total_pgmajfault 6 [ 149.785897][ T7649] total_inactive_anon 0 [ 149.805224][ T7649] total_active_anon 24576 [ 149.824569][ T7649] total_inactive_file 0 [ 149.829505][ T7649] total_active_file 8192 [ 149.834451][ T7649] total_unevictable 0 [ 149.838738][ T7649] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.939,pid=7649,uid=0 [ 149.884492][ T7649] Memory cgroup out of memory: Killed process 7649 (syz.1.939) total-vm:229332kB, anon-rss:1228kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 149.903608][ T7784] netlink: 96 bytes leftover after parsing attributes in process `syz.0.947'. [ 149.924922][ T7786] netlink: 60 bytes leftover after parsing attributes in process `syz.4.950'. [ 149.939867][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'. [ 149.958869][ T7786] netlink: 60 bytes leftover after parsing attributes in process `syz.4.950'. [ 150.015363][ T7795] netlink: 168 bytes leftover after parsing attributes in process `syz.4.952'. [ 150.045174][ T7791] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.951'. [ 150.121371][ T28] audit: type=1400 audit(1774443627.494:1033): avc: denied { create } for pid=7802 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 150.284316][ T28] audit: type=1400 audit(1774443627.514:1034): avc: denied { setopt } for pid=7802 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 150.307955][ T7801] loop3: detected capacity change from 0 to 1024 [ 151.287348][ T28] audit: type=1400 audit(1774443627.514:1035): avc: denied { write } for pid=7802 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 152.129253][ T7801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 152.142378][ T7801] System zones: 0-1, 3-36 [ 152.172503][ T7801] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.956: bad orphan inode 134217728 [ 152.183544][ T7801] loop3: lost filesystem error report for type 5 error -117 [ 152.187330][ T7801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.363707][ T7821] loop0: detected capacity change from 0 to 512 [ 153.452016][ T7821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.469946][ T7823] netlink: 60 bytes leftover after parsing attributes in process `syz.4.963'. [ 153.479272][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 153.479464][ T7821] EXT4-fs (loop0): 1 truncate cleaned up [ 153.489012][ T7823] netlink: 60 bytes leftover after parsing attributes in process `syz.4.963'. [ 153.504452][ T7821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.557152][ T7828] loop1: detected capacity change from 0 to 256 [ 153.564396][ T7828] vfat: Unknown parameter 'Aÿ000000000000000000030177777777777777777777718446744073709551615' [ 153.584239][ T28] audit: type=1400 audit(1774443630.954:1036): avc: denied { watch_reads } for pid=7808 comm="syz.1.959" path="/201/file0" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 153.961259][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.985341][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.000475][ T7833] netlink: 96 bytes leftover after parsing attributes in process `syz.4.964'. [ 154.047219][ T7842] netlink: 168 bytes leftover after parsing attributes in process `syz.0.968'. [ 154.054584][ T7843] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.965'. [ 154.102757][ T7851] netlink: 'syz.0.972': attribute type 10 has an invalid length. [ 154.131175][ T7853] tipc: Started in network mode [ 154.150420][ T7853] tipc: Node identity , cluster identity 4711 [ 154.156526][ T7853] tipc: Failed to set node id, please configure manually [ 154.170353][ T7853] tipc: Enabling of bearer rejected, failed to enable media [ 154.181100][ T7853] netlink: 'syz.4.973': attribute type 2 has an invalid length. [ 154.261766][ T7853] can0: slcan on ttyS3. [ 154.314490][ T7852] can0 (unregistered): slcan off ttyS3. [ 154.536141][ T7887] loop0: detected capacity change from 0 to 1024 [ 154.839052][ T7892] loop1: detected capacity change from 0 to 1024 [ 154.883972][ T7894] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.978'. [ 154.904638][ T7892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 154.915367][ T7892] System zones: 0-1, 3-36 [ 154.923309][ T7892] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.977: bad orphan inode 134217728 [ 154.939863][ T7892] loop1: lost filesystem error report for type 5 error -117 [ 154.947156][ T7892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.017803][ T7897] netlink: 96 bytes leftover after parsing attributes in process `syz.0.979'. [ 155.171056][ T7910] netlink: 96 bytes leftover after parsing attributes in process `syz.0.984'. [ 155.251698][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 155.279353][ T7918] loop4: detected capacity change from 0 to 1024 [ 155.563533][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 155.563669][ T7923] netlink: 'syz.4.986': attribute type 10 has an invalid length. [ 155.641991][ T7924] 9pnet_fd: p9_fd_create_tcp (7924): problem connecting socket to 127.0.0.1 [ 155.704016][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.930169][ T28] audit: type=1326 audit(1774443633.294:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 155.981142][ T28] audit: type=1326 audit(1774443633.294:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.030511][ T28] audit: type=1326 audit(1774443633.294:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.056552][ T28] audit: type=1326 audit(1774443633.294:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.106619][ T28] audit: type=1326 audit(1774443633.294:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.137959][ T28] audit: type=1326 audit(1774443633.294:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.177132][ T28] audit: type=1326 audit(1774443633.324:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.200584][ T28] audit: type=1326 audit(1774443633.324:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.224069][ T28] audit: type=1326 audit(1774443633.344:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.259236][ T28] audit: type=1326 audit(1774443633.344:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 156.510098][ T7949] lo speed is unknown, defaulting to 1000 [ 156.516231][ T7949] lo speed is unknown, defaulting to 1000 [ 156.604728][ T7950] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 156.668523][ T7950] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 156.707771][ T7950] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 156.716189][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 156.752218][ T7954] macvlan2: entered promiscuous mode [ 156.757585][ T7956] random: crng reseeded on system resumption [ 156.757834][ T7954] macvlan2: entered allmulticast mode [ 156.769951][ T7954] bond5: entered promiscuous mode [ 156.779421][ T7954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.851097][ T7954] bond5: left promiscuous mode [ 156.872711][ T7956] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 156.884270][ T7956] bond4 (unregistering): Released all slaves [ 157.062870][ T7964] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 157.086265][ T7966] loop0: detected capacity change from 0 to 1024 [ 157.215381][ T7968] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.315228][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1000'. [ 157.353904][ T7968] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 157.431719][ T7971] macvlan2: entered promiscuous mode [ 157.437598][ T7971] macvlan2: entered allmulticast mode [ 157.444616][ T7971] bond6: entered promiscuous mode [ 157.450907][ T7971] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.462904][ T7971] bond6: left promiscuous mode [ 157.709770][ T7978] loop1: detected capacity change from 0 to 512 [ 157.728204][ T7978] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 157.761646][ T7978] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 157.790461][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 157.797582][ C0] EXT4-fs (loop1): initial error at time 1774443635: mb_free_blocks:2047: inode 11: block 64 [ 157.808842][ C0] EXT4-fs (loop1): last error at time 1774443635: mb_free_blocks:2047: inode 11: block 64 [ 157.823011][ T7978] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.1003: corrupted inode contents [ 157.834977][ T7978] fserror_report: 2 callbacks suppressed [ 157.834987][ T7978] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.841111][ T7978] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #11: comm syz.1.1003: mark_inode_dirty error [ 157.871788][ T7978] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.871991][ T7978] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1003: invalid indirect mapped block 1 (level 1) [ 157.917590][ T7978] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.917766][ T7978] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.1003: corrupted inode contents [ 157.961114][ T7978] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.961244][ T7978] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 157.999109][ T7978] loop1: lost filesystem error report for type 5 error -117 [ 157.999263][ T7978] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.1003: corrupted inode contents [ 158.038667][ T7978] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.039027][ T7978] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.1003: mark_inode_dirty error [ 158.081791][ T7978] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.081989][ T7978] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 158.118885][ T7978] loop1: lost filesystem error report for type 5 error -117 [ 158.119089][ T7978] EXT4-fs (loop1): 1 truncate cleaned up [ 158.146291][ T7978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.458891][ T7987] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.1003: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 158.573471][ T7990] loop3: detected capacity change from 0 to 1024 [ 158.760878][ T7992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7992 comm=syz.2.1008 [ 158.922342][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.932867][ T7996] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 158.972782][ T7996] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 159.002803][ T7996] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 159.012516][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1010'. [ 159.042163][ T8002] macvlan3: entered promiscuous mode [ 159.047677][ T8002] macvlan3: entered allmulticast mode [ 159.053872][ T8002] bond9: entered promiscuous mode [ 159.059272][ T8002] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 159.069224][ T8004] loop1: detected capacity change from 0 to 256 [ 159.094093][ T8002] bond9: left promiscuous mode [ 159.146118][ T8007] loop1: detected capacity change from 0 to 1024 [ 159.424173][ T8014] loop3: detected capacity change from 0 to 8192 [ 160.161885][ T8026] loop4: detected capacity change from 0 to 1024 [ 160.450965][ T8026] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.514039][ T8026] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 160.574174][ T8026] EXT4-fs (loop4): invalid journal inode [ 160.603897][ T8026] EXT4-fs (loop4): can't get journal size [ 160.695756][ T8026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.387545][ T8047] loop1: detected capacity change from 0 to 1024 [ 161.422140][ T8051] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 161.499885][ T8051] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.560811][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1027'. [ 161.602410][ T8051] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 161.652037][ T8055] macvlan2: entered promiscuous mode [ 161.676314][ T8055] macvlan2: entered allmulticast mode [ 161.693357][ T8055] bond6: entered promiscuous mode [ 161.732926][ T8055] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.738974][ T8060] loop0: detected capacity change from 0 to 1024 [ 161.760602][ T8055] bond6: left promiscuous mode [ 162.077005][ T8070] xt_hashlimit: max too large, truncated to 1048576 [ 162.118886][ T8071] lo speed is unknown, defaulting to 1000 [ 162.125384][ T8071] lo speed is unknown, defaulting to 1000 [ 162.255725][ T8073] xt_hashlimit: max too large, truncated to 1048576 [ 162.428070][ T8075] loop0: detected capacity change from 0 to 256 [ 162.579460][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 162.579518][ T28] audit: type=1400 audit(1774443639.944:1114): avc: denied { connect } for pid=8076 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.635614][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 162.730112][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 162.817559][ T8091] loop3: detected capacity change from 0 to 1024 [ 162.861867][ T8093] loop1: detected capacity change from 0 to 512 [ 162.873496][ T8093] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 162.917295][ T8093] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 162.940326][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 162.940619][ T8093] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.1041: corrupted inode contents [ 162.946775][ C1] EXT4-fs (loop1): initial error at time 1774443640: mb_free_blocks:2047: inode 11: block 64 [ 162.968778][ C1] EXT4-fs (loop1): last error at time 1774443640: mb_free_blocks:2047: inode 11: block 64 [ 163.010470][ T8093] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 163.010655][ T8093] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #11: comm syz.1.1041: mark_inode_dirty error [ 163.100611][ T8093] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 163.100826][ T8093] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1041: invalid indirect mapped block 1 (level 1) [ 163.190402][ T8093] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 163.200565][ T8093] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.1041: corrupted inode contents [ 163.273336][ T8093] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 163.273546][ T8093] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 163.330327][ T8093] loop1: lost filesystem error report for type 5 error -117 [ 163.330561][ T8093] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.1041: corrupted inode contents [ 163.370380][ T8093] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 163.371496][ T8093] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.1041: mark_inode_dirty error [ 163.410351][ T8093] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 163.410520][ T8093] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 163.451105][ T8093] loop1: lost filesystem error report for type 5 error -117 [ 163.451329][ T8093] EXT4-fs (loop1): 1 truncate cleaned up [ 163.500681][ T8093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.571035][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.611697][ T28] audit: type=1400 audit(1774443640.974:1115): avc: denied { ioctl } for pid=8101 comm="syz.3.1043" path="socket:[17254]" dev="sockfs" ino=17254 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.680389][ T28] audit: type=1400 audit(1774443641.024:1116): avc: denied { create } for pid=8108 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.711677][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'. [ 163.720392][ T28] audit: type=1400 audit(1774443641.074:1117): avc: denied { write } for pid=8108 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.760943][ T28] audit: type=1400 audit(1774443641.094:1118): avc: denied { getopt } for pid=8108 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.811228][ T28] audit: type=1400 audit(1774443641.134:1119): avc: denied { wake_alarm } for pid=8110 comm="syz.0.1047" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.879173][ T28] audit: type=1400 audit(1774443641.134:1120): avc: denied { write } for pid=8110 comm="syz.0.1047" path="socket:[16302]" dev="sockfs" ino=16302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.921629][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.277779][ T8130] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 164.352818][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 164.390780][ T28] audit: type=1400 audit(1774443641.674:1121): avc: denied { ioctl } for pid=8119 comm="syz.2.1048" path="socket:[16348]" dev="sockfs" ino=16348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.455540][ T28] audit: type=1326 audit(1774443641.704:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20a7cc799 code=0x7ffc0000 [ 164.495290][ T28] audit: type=1326 audit(1774443641.704:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20a7cc799 code=0x7ffc0000 [ 164.584427][ T8140] loop1: detected capacity change from 0 to 1024 [ 164.593019][ T8140] EXT4-fs: Ignoring removed oldalloc option [ 164.596037][ T8138] loop3: detected capacity change from 0 to 1024 [ 164.599288][ T8140] EXT4-fs: Ignoring removed bh option [ 164.636422][ T8140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.651763][ T8138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 164.675874][ T8138] System zones: 0-1, 3-36 [ 164.702843][ T8138] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1054: bad orphan inode 134217728 [ 164.715988][ T8138] loop3: lost filesystem error report for type 5 error -117 [ 164.719133][ T8138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.786467][ T8140] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 164.810634][ T8140] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 165.527592][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.798003][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.072787][ T8160] loop1: detected capacity change from 0 to 1024 [ 166.163198][ T8162] netlink: 'syz.3.1061': attribute type 2 has an invalid length. [ 166.188021][ T8164] loop0: detected capacity change from 0 to 256 [ 166.262105][ T8162] can0: slcan on ttyS3. [ 166.340560][ T8161] can0 (unregistered): slcan off ttyS3. [ 166.725546][ T8226] loop4: detected capacity change from 0 to 1024 [ 166.733571][ T8226] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 166.741933][ T8226] System zones: 0-1, 3-36 [ 166.747445][ T8226] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1074: bad orphan inode 134217728 [ 166.758340][ T8226] loop4: lost filesystem error report for type 5 error -117 [ 166.759052][ T8226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.999793][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.126009][ T8238] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 167.151697][ T8238] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.162821][ T8238] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 167.212017][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1077'. [ 167.248722][ T8238] macvlan2: entered promiscuous mode [ 167.254130][ T8238] macvlan2: entered allmulticast mode [ 167.259828][ T8238] bond7: entered promiscuous mode [ 167.265733][ T8238] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.369739][ T8238] bond7: left promiscuous mode [ 167.619002][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 167.619014][ T28] audit: type=1326 audit(1774443644.984:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 167.801380][ T28] audit: type=1326 audit(1774443645.014:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 167.951235][ T28] audit: type=1326 audit(1774443645.014:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 168.117803][ T28] audit: type=1326 audit(1774443645.014:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 168.170447][ T28] audit: type=1326 audit(1774443645.014:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 168.221791][ T28] audit: type=1326 audit(1774443645.064:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 168.290444][ T28] audit: type=1326 audit(1774443645.064:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 168.498238][ T28] audit: type=1326 audit(1774443645.074:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61dc9c799 code=0x7ffc0000 [ 168.889041][ T28] audit: type=1326 audit(1774443645.074:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff61dc9c502 code=0x7ffc0000 [ 168.912655][ T28] audit: type=1326 audit(1774443645.074:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff61dc9c597 code=0x7ffc0000 [ 169.581693][ T8273] loop0: detected capacity change from 0 to 512 [ 169.622902][ T8273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.654024][ T8273] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1087: corrupted inode contents [ 169.710498][ T8273] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.710707][ T8273] EXT4-fs (loop0): Remounting filesystem read-only [ 169.726340][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 169.726360][ C1] EXT4-fs (loop0): initial error at time 1774443647: ext4_do_update_inode:5569: inode 15 [ 169.726394][ C1] EXT4-fs (loop0): last error at time 1774443647: ext4_do_update_inode:5569: inode 15 [ 169.830533][ T8273] EXT4-fs (loop0): 1 orphan inode deleted [ 169.850733][ T8273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.937585][ T8276] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1087'. [ 170.226932][ T8280] loop4: detected capacity change from 0 to 1024 [ 170.430684][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.451441][ T8287] loop1: detected capacity change from 0 to 1024 [ 171.089645][ T8298] lo speed is unknown, defaulting to 1000 [ 171.096157][ T8298] lo speed is unknown, defaulting to 1000 [ 171.167898][ T8287] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 171.265985][ T8287] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 171.282465][ T8287] EXT4-fs (loop1): invalid journal inode [ 171.292513][ T8287] EXT4-fs (loop1): can't get journal size [ 171.372486][ T8287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.810625][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 172.119827][ T8316] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 172.136113][ T8311] loop4: detected capacity change from 0 to 1024 [ 172.589281][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 172.631811][ T8311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 172.709088][ T8311] System zones: 0-1, 3-36 [ 172.739843][ T8311] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1096: bad orphan inode 134217728 [ 172.792160][ T8311] loop4: lost filesystem error report for type 5 error -117 [ 172.800340][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 172.814106][ C0] EXT4-fs (loop4): initial error at time 1774443650: ext4_orphan_get:1417 [ 172.819102][ T8319] lo speed is unknown, defaulting to 1000 [ 172.822660][ C0] EXT4-fs (loop4): last error at time 1774443650: ext4_orphan_get:1417 [ 172.828718][ T8319] lo speed is unknown, defaulting to 1000 [ 172.839042][ T8311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.869980][ T8320] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 172.924447][ T8320] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 173.025963][ T8320] macvlan2: entered promiscuous mode [ 173.043628][ T8320] macvlan2: entered allmulticast mode [ 173.057014][ T8320] bond6: entered promiscuous mode [ 173.099916][ T8320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.141951][ T8320] bond6: left promiscuous mode [ 173.339350][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 173.339419][ T28] audit: type=1400 audit(1774443650.704:1289): avc: denied { getopt } for pid=8336 comm="syz.0.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.432296][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.951809][ T8351] loop4: detected capacity change from 0 to 8192 [ 174.021499][ T8356] loop3: detected capacity change from 0 to 1024 [ 174.639754][ T8364] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 174.795815][ T8366] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 174.806372][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1113'. [ 174.845408][ T8366] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 174.858364][ T8364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1113'. [ 174.945274][ T8371] macvlan2: entered promiscuous mode [ 174.950649][ T8371] macvlan2: entered allmulticast mode [ 174.956522][ T8371] bond7: entered promiscuous mode [ 174.984047][ T8371] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.012732][ T8371] bond7: left promiscuous mode [ 175.083370][ T8375] can: request_module (can-proto-4) failed. [ 175.121987][ T8382] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1118'. [ 175.247565][ T8386] loop3: detected capacity change from 0 to 8192 [ 175.872753][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.973460][ T8396] random: crng reseeded on system resumption [ 176.066934][ T8400] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 176.264073][ T8400] bond10 (unregistering): Released all slaves [ 176.354130][ T8411] loop3: detected capacity change from 0 to 1024 [ 176.873019][ T8419] loop4: detected capacity change from 0 to 1024 [ 177.040270][ T8425] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 177.133663][ T8425] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 177.161908][ T8425] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 177.209613][ T8430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1129'. [ 177.228165][ T8432] loop3: detected capacity change from 0 to 1024 [ 177.261791][ T8435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1129'. [ 177.314100][ T8437] loop4: detected capacity change from 0 to 1024 [ 177.331665][ T8430] macvlan2: entered promiscuous mode [ 177.361975][ T8430] macvlan2: entered allmulticast mode [ 177.393291][ T8430] bond8: entered promiscuous mode [ 177.412111][ T8430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.439457][ T8430] bond8: left promiscuous mode [ 179.666052][ T8464] lo speed is unknown, defaulting to 1000 [ 179.672633][ T8464] lo speed is unknown, defaulting to 1000 [ 179.731366][ T8463] loop1: detected capacity change from 0 to 1024 [ 179.758400][ T8463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 179.787551][ T8463] System zones: 0-1, 3-36 [ 179.800405][ T8463] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1139: bad orphan inode 134217728 [ 179.805628][ T8470] loop3: detected capacity change from 0 to 512 [ 179.816537][ T8463] loop1: lost filesystem error report for type 5 error -117 [ 179.820322][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 179.834077][ C1] EXT4-fs (loop1): initial error at time 1774443657: ext4_orphan_get:1417 [ 179.842611][ C1] EXT4-fs (loop1): last error at time 1774443657: ext4_orphan_get:1417 [ 179.920774][ T8470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.114289][ T8470] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1140: corrupted inode contents [ 180.145002][ T8470] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.145404][ T8470] EXT4-fs (loop3): Remounting filesystem read-only [ 180.154761][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 180.154777][ C0] EXT4-fs (loop3): initial error at time 1774443657: ext4_do_update_inode:5569: inode 15 [ 180.154836][ C0] EXT4-fs (loop3): last error at time 1774443657: ext4_do_update_inode:5569: inode 15 [ 180.193560][ T8470] EXT4-fs (loop3): 1 orphan inode deleted [ 180.214219][ T8463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.236751][ T8470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.494771][ T8475] netlink: 'syz.2.1141': attribute type 2 has an invalid length. [ 180.542290][ T8470] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1140'. [ 180.701084][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.722119][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.346192][ T8489] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1145'. [ 181.729335][ T8493] loop3: detected capacity change from 0 to 1024 [ 182.536749][ T8509] loop4: detected capacity change from 0 to 1024 [ 182.579729][ T8509] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 182.747124][ T8509] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 182.773256][ T8509] EXT4-fs (loop4): invalid journal inode [ 182.781757][ T8509] EXT4-fs (loop4): can't get journal size [ 182.855660][ T8509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.893294][ T8524] loop3: detected capacity change from 0 to 1024 [ 183.089468][ T28] audit: type=1326 audit(1774443660.454:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cb0bc799 code=0x7ffc0000 [ 183.115613][ T8530] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1160'. [ 183.147777][ T28] audit: type=1326 audit(1774443660.454:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cb0bc799 code=0x7ffc0000 [ 183.191849][ T28] audit: type=1326 audit(1774443660.454:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f68cb0bc799 code=0x7ffc0000 [ 183.217044][ T28] audit: type=1326 audit(1774443660.454:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f68cb0bc799 code=0x7ffc0000 [ 183.244845][ T8532] lo speed is unknown, defaulting to 1000 [ 183.262409][ T8532] lo speed is unknown, defaulting to 1000 [ 183.271667][ T8534] netlink: 'syz.0.1162': attribute type 2 has an invalid length. [ 183.300478][ T8537] loop1: detected capacity change from 0 to 256 [ 183.307832][ T8535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1161'. [ 183.413597][ T8538] can0: slcan on ttyS3. [ 183.422347][ T8544] loop3: detected capacity change from 0 to 256 [ 183.499407][ T8546] loop1: detected capacity change from 0 to 1024 [ 183.508216][ T8548] usb usb7: usbfs: process 8548 (syz.3.1168) did not claim interface 0 before use [ 183.674238][ T8555] loop3: detected capacity change from 0 to 1024 [ 183.770605][ T8533] can0 (unregistered): slcan off ttyS3. [ 184.373009][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 184.460768][ T8578] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1172'. [ 185.404467][ T8604] netlink: 564 bytes leftover after parsing attributes in process `syz.3.1176'. [ 185.486868][ T8607] loop0: detected capacity change from 0 to 256 [ 185.684465][ T8613] loop3: detected capacity change from 0 to 8192 [ 185.907500][ T8616] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 185.914112][ T8616] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.079089][ T8616] vhci_hcd vhci_hcd.0: Device attached [ 186.198805][ T28] audit: type=1400 audit(1774443663.564:1294): avc: denied { ioctl } for pid=8615 comm="syz.0.1181" path="net:[4026532512]" dev="nsfs" ino=4026532512 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 186.310366][ T3401] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 186.488339][ T28] audit: type=1326 audit(1774443663.844:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba73c799 code=0x7ffc0000 [ 186.542397][ T28] audit: type=1326 audit(1774443663.844:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba73c799 code=0x7ffc0000 [ 186.570616][ T28] audit: type=1326 audit(1774443663.844:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9ba73c799 code=0x7ffc0000 [ 186.594113][ T28] audit: type=1326 audit(1774443663.844:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba73c799 code=0x7ffc0000 [ 186.617666][ T28] audit: type=1326 audit(1774443663.844:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba73c799 code=0x7ffc0000 [ 186.730661][ T8618] vhci_hcd: connection reset by peer [ 186.746269][ T70] vhci_hcd vhci_hcd.0: stop threads [ 186.754688][ T70] vhci_hcd vhci_hcd.0: release socket [ 186.770219][ T70] vhci_hcd vhci_hcd.0: disconnect device [ 186.805265][ T8639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1188'. [ 186.854737][ T8641] loop3: detected capacity change from 0 to 1024 [ 186.869665][ T8643] loop0: detected capacity change from 0 to 1024 [ 186.949524][ T8646] loop0: detected capacity change from 0 to 256 [ 187.020477][ T8649] netlink: 'syz.0.1192': attribute type 2 has an invalid length. [ 187.102838][ T8649] can0: slcan on ttyS3. [ 187.141456][ T8648] can0 (unregistered): slcan off ttyS3. [ 187.171783][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.102887][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 188.102915][ T28] audit: type=1326 audit(1774443665.474:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 188.282459][ T28] audit: type=1326 audit(1774443665.474:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 188.371820][ T8676] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1200'. [ 188.418350][ T8676] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1200'. [ 188.474558][ T28] audit: type=1326 audit(1774443665.504:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 188.536928][ T8680] loop0: detected capacity change from 0 to 1024 [ 188.622454][ T28] audit: type=1326 audit(1774443665.504:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 188.716949][ T8682] loop3: detected capacity change from 0 to 8192 [ 188.750586][ T8684] loop0: detected capacity change from 0 to 1024 [ 188.780708][ T28] audit: type=1326 audit(1774443665.504:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 188.950048][ T28] audit: type=1326 audit(1774443665.504:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 189.015727][ T28] audit: type=1326 audit(1774443665.504:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 189.041058][ T8688] tipc: Started in network mode [ 189.049432][ T8688] tipc: Node identity , cluster identity 4711 [ 189.057934][ T28] audit: type=1326 audit(1774443665.504:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 189.062228][ T8688] tipc: Failed to set node id, please configure manually [ 189.088426][ T8688] tipc: Enabling of bearer rejected, failed to enable media [ 189.104461][ T8688] netlink: 'syz.1.1205': attribute type 2 has an invalid length. [ 189.132725][ T28] audit: type=1326 audit(1774443665.514:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 189.161755][ T28] audit: type=1326 audit(1774443665.514:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e631dc799 code=0x7ffc0000 [ 189.192599][ T8688] can0: slcan on ttyS3. [ 189.260487][ T8687] can0 (unregistered): slcan off ttyS3. [ 189.541862][ T8715] loop3: detected capacity change from 0 to 1024 [ 189.575368][ T8718] loop1: detected capacity change from 0 to 1024 [ 189.613155][ T8718] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 189.699988][ T8718] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 189.726689][ T8720] loop0: detected capacity change from 0 to 1024 [ 189.730182][ T8718] EXT4-fs (loop1): invalid journal inode [ 189.782285][ T8718] EXT4-fs (loop1): can't get journal size [ 189.813238][ T8720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 189.836834][ T8730] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 189.873265][ T8718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.911545][ T8720] System zones: 0-1, 3-36 [ 189.920483][ T8730] bond10: (slave vxcan7): The slave device specified does not support setting the MAC address [ 189.949680][ T8720] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1208: bad orphan inode 134217728 [ 189.972381][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1209'. [ 189.999607][ T8720] loop0: lost filesystem error report for type 5 error -117 [ 190.000332][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 190.014122][ C1] EXT4-fs (loop0): initial error at time 1774443667: ext4_orphan_get:1417 [ 190.022711][ C1] EXT4-fs (loop0): last error at time 1774443667: ext4_orphan_get:1417 [ 190.032282][ T8736] FAULT_INJECTION: forcing a failure. [ 190.032282][ T8736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.038224][ T8720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.065567][ T8730] bond10: (slave vxcan7): Error -95 calling set_mac_address [ 190.079978][ T8736] CPU: 1 UID: 0 PID: 8736 Comm: syz.3.1210 Not tainted syzkaller #0 PREEMPT(full) [ 190.080004][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.080019][ T8736] Call Trace: [ 190.080024][ T8736] [ 190.080030][ T8736] __dump_stack+0x1d/0x30 [ 190.080052][ T8736] dump_stack_lvl+0x95/0xd0 [ 190.080148][ T8736] dump_stack+0x15/0x1b [ 190.080165][ T8736] should_fail_ex+0x263/0x280 [ 190.080229][ T8736] should_fail+0xb/0x20 [ 190.080273][ T8736] should_fail_usercopy+0x1a/0x20 [ 190.080300][ T8736] _copy_to_user+0x20/0xa0 [ 190.080326][ T8736] simple_read_from_buffer+0xb5/0x130 [ 190.080344][ T8736] proc_fail_nth_read+0x10e/0x150 [ 190.080422][ T8736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.080448][ T8736] vfs_read+0x1ab/0x7f0 [ 190.080511][ T8736] ? __rcu_read_unlock+0x4e/0x70 [ 190.080531][ T8736] ? __fget_files+0x184/0x1c0 [ 190.080554][ T8736] ? mutex_lock+0x57/0x90 [ 190.080660][ T8736] ksys_read+0xdc/0x1a0 [ 190.080692][ T8736] __x64_sys_read+0x40/0x50 [ 190.080718][ T8736] x64_sys_call+0x2886/0x3020 [ 190.080740][ T8736] do_syscall_64+0x12c/0x370 [ 190.080762][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.080813][ T8736] RIP: 0033:0x7ff61dc5cfce [ 190.080829][ T8736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.080843][ T8736] RSP: 002b:00007ff61c6f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.080862][ T8736] RAX: ffffffffffffffda RBX: 00007ff61c6f76c0 RCX: 00007ff61dc5cfce [ 190.080876][ T8736] RDX: 000000000000000f RSI: 00007ff61c6f70a0 RDI: 0000000000000004 [ 190.080965][ T8736] RBP: 00007ff61c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 190.080975][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.080986][ T8736] R13: 00007ff61df16038 R14: 00007ff61df15fa0 R15: 00007ffd82e9faf8 [ 190.081001][ T8736] [ 190.099805][ T8728] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1209'. [ 190.533913][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.999692][ T8751] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1214'. [ 191.160865][ T8755] tipc: Started in network mode [ 191.165954][ T8755] tipc: Node identity , cluster identity 4711 [ 191.177673][ T8755] tipc: Failed to set node id, please configure manually [ 191.194378][ T8755] tipc: Enabling of bearer rejected, failed to enable media [ 191.203944][ T8755] netlink: 'syz.0.1216': attribute type 2 has an invalid length. [ 191.318314][ T8757] loop3: detected capacity change from 0 to 8192 [ 191.342496][ T8755] can0: slcan on ttyS3. [ 191.354633][ T3401] usb 1-1: enqueue for inactive port 0 [ 191.367350][ T3401] usb 1-1: enqueue for inactive port 0 [ 191.377724][ T8760] random: crng reseeded on system resumption [ 191.410597][ T8754] can0 (unregistered): slcan off ttyS3. [ 191.416665][ T8760] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 191.428471][ T8760] bond11 (unregistering): Released all slaves [ 191.460347][ T3401] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 191.704879][ T8766] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 191.816289][ T8766] System zones: 0-1, 3-36 [ 191.901455][ T8766] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1219: bad orphan inode 134217728 [ 191.941251][ T8766] loop0: lost filesystem error report for type 5 error -117 [ 192.010447][ T8766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.261207][ T8771] set_capacity_and_notify: 1 callbacks suppressed [ 192.261222][ T8771] loop3: detected capacity change from 0 to 512 [ 192.289113][ T8773] loop4: detected capacity change from 0 to 1024 [ 192.309685][ T8771] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1220: inode has both inline data and extents flags [ 192.370421][ T8771] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.375754][ T8771] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1220: couldn't read orphan inode 15 (err -117) [ 192.384951][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 192.384972][ C0] EXT4-fs (loop3): initial error at time 1774443669: ext4_orphan_get:1391: inode 15 [ 192.385018][ C0] EXT4-fs (loop3): last error at time 1774443669: ext4_orphan_get:1391: inode 15 [ 192.500387][ T8771] loop3: lost filesystem error report for type 5 error -117 [ 192.508550][ T8771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.529132][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.581727][ T8771] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.1220: inode has both inline data and extents flags [ 192.691114][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.755575][ T8781] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 192.820280][ T8781] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 192.831915][ T8781] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 192.871973][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1223'. [ 192.890648][ T8786] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1224'. [ 192.906349][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 192.917453][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 192.943496][ T8781] macvlan2: entered promiscuous mode [ 192.949399][ T8781] macvlan2: entered allmulticast mode [ 192.956241][ T8781] bond8: entered promiscuous mode [ 192.961759][ T8781] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.969292][ T8789] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1226'. [ 192.980039][ T8781] bond8: left promiscuous mode [ 193.051070][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.188142][ T8805] loop4: detected capacity change from 0 to 1024 [ 193.235160][ T8808] loop1: detected capacity change from 0 to 1024 [ 193.361961][ T8812] vlan1: entered promiscuous mode [ 193.367397][ T8812] vlan1: entered allmulticast mode [ 193.372891][ T8812] hsr_slave_1: entered allmulticast mode [ 193.749937][ T8821] loop4: detected capacity change from 0 to 256 [ 194.025559][ T8824] loop4: detected capacity change from 0 to 1024 [ 194.126487][ T8834] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1238'. [ 194.148272][ T8824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 194.165860][ T8824] System zones: 0-1, 3-36 [ 194.191937][ T8824] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1237: bad orphan inode 134217728 [ 194.205123][ T8824] loop4: lost filesystem error report for type 5 error -117 [ 194.209452][ T8824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.405582][ T8845] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 194.414002][ T8844] loop1: detected capacity change from 0 to 1024 [ 194.455785][ T8844] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 194.507117][ T8845] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 194.520622][ T8847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1240'. [ 194.529160][ T8845] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 194.543428][ T8844] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 194.553473][ T8844] EXT4-fs (loop1): invalid journal inode [ 194.559158][ T8844] EXT4-fs (loop1): can't get journal size [ 194.568248][ T8844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.617836][ T8853] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 194.619686][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 194.700403][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 194.753660][ T8853] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 194.764714][ T8853] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 194.801164][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1242'. [ 194.850259][ T8855] macvlan2: entered promiscuous mode [ 194.887950][ T8855] macvlan2: entered allmulticast mode [ 194.905928][ T8855] bond9: entered promiscuous mode [ 194.924068][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.940695][ T8855] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.981681][ T8855] bond9: left promiscuous mode [ 195.009796][ T8843] macvlan2: entered promiscuous mode [ 195.020404][ T8843] macvlan2: entered allmulticast mode [ 195.026317][ T8843] bond9: entered promiscuous mode [ 195.026600][ T8843] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.052156][ T8843] bond9: left promiscuous mode [ 195.186436][ T8869] loop3: detected capacity change from 0 to 8192 [ 196.228680][ T8887] loop4: detected capacity change from 0 to 256 [ 196.354541][ T8891] loop3: detected capacity change from 0 to 1024 [ 196.543311][ T2136] ================================================================== [ 196.551408][ T2136] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 196.560873][ T2136] [ 196.563191][ T2136] write to 0xffff8881461346ea of 20 bytes by task 8896 on cpu 1: [ 196.570896][ T2136] copy_folio_from_iter_atomic+0x75f/0x1170 [ 196.576786][ T2136] generic_perform_write+0x2c1/0x490 [ 196.582073][ T2136] __generic_file_write_iter+0x9e/0x120 [ 196.587611][ T2136] generic_file_write_iter+0x8d/0x310 [ 196.592986][ T2136] iter_file_splice_write+0x6c4/0xa80 [ 196.598348][ T2136] direct_splice_actor+0x156/0x2a0 [ 196.603454][ T2136] splice_direct_to_actor+0x311/0x670 [ 196.608822][ T2136] do_splice_direct+0x119/0x1a0 [ 196.613668][ T2136] do_sendfile+0x382/0x650 [ 196.618075][ T2136] __x64_sys_sendfile64+0x105/0x150 [ 196.623260][ T2136] x64_sys_call+0x2dc4/0x3020 [ 196.627941][ T2136] do_syscall_64+0x12c/0x370 [ 196.632524][ T2136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.638410][ T2136] [ 196.640722][ T2136] read to 0xffff888146134600 of 512 bytes by task 2136 on cpu 0: [ 196.648426][ T2136] copy_folio_from_iter_atomic+0x75f/0x1170 [ 196.654318][ T2136] generic_perform_write+0x2c1/0x490 [ 196.659625][ T2136] shmem_file_write_iter+0xc5/0xf0 [ 196.664741][ T2136] lo_rw_aio+0x67d/0x730 [ 196.668975][ T2136] loop_process_work+0x56c/0xac0 [ 196.673913][ T2136] loop_workfn+0x31/0x40 [ 196.678174][ T2136] process_scheduled_works+0x513/0xa10 [ 196.683628][ T2136] worker_thread+0x58a/0x780 [ 196.688214][ T2136] kthread+0x22a/0x280 [ 196.692275][ T2136] ret_from_fork+0x150/0x360 [ 196.696941][ T2136] ret_from_fork_asm+0x1a/0x30 [ 196.701695][ T2136] [ 196.704001][ T2136] Reported by Kernel Concurrency Sanitizer on: [ 196.710138][ T2136] CPU: 0 UID: 0 PID: 2136 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 196.719583][ T2136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.729634][ T2136] Workqueue: loop4 loop_workfn [ 196.734404][ T2136] ================================================================== [ 196.747052][ T8897] random: crng reseeded on system resumption [ 196.786487][ T8897] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 196.799924][ T8897] bond10 (unregistering): Released all slaves [ 197.025717][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.