last executing test programs: 17m32.732044051s ago: executing program 32 (id=1561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 17m12.073928264s ago: executing program 33 (id=1706): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000004100)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000002a040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16m56.348152887s ago: executing program 34 (id=1797): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x10, 0x3, 0x23}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff00000000a1ff, 0x0, 0x0) dup3(r2, r0, 0x80000) 15m29.714131016s ago: executing program 1 (id=2434): r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_open_procfs(r0, &(0x7f0000000380)='maps\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x14, r3, 0x1, 0x7fffffff}, 0x14}}, 0x20000054) ioctl$EVIOCGBITSW(r1, 0x80404525, 0x0) 15m29.677615479s ago: executing program 1 (id=2436): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x10, 0x24048048, &(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') mmap$IORING_OFF_CQ_RING(&(0x7f000046c000/0x4000)=nil, 0x4000, 0x2, 0x4000010, r1, 0x8000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) socket$caif_stream(0x25, 0x1, 0x5) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 15m29.029841274s ago: executing program 1 (id=2439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 15m28.827603168s ago: executing program 1 (id=2441): r0 = socket(0x11, 0x0, 0x0) write(r0, &(0x7f0000000180)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00b5909c5d710c88b255dd0c19cc75883360a2e8e3f7a5dd6e3c48c76ab8ebb6c5297fdb7d55417504355ac9729bbcf103ca066be25b6528fbdcf04f000000000000000055a8903290843deafe0cffc8d91a6026cd8d79d01087f3f3d2512c8b9240eec12873e0e28a6f35ca19aa4ba548e0d346df584a8655561ec89a87dc16f477080ed39b54a723a97c58b8b3988e820a7773fd5aef73c4fc48342756b62fad0214077bc9a3705e8d41941a28064430576b59214e11f15695321c1b4c079a3af2798cdaf1cc33c192f4b2075fd9cf9fc4f1773652c2c80b0208a53087ebc046061770c758bc96225f79d7e3c7dd8d7ec19f686d5dfd6c005181e8eb2014c087ad5b4a14154681ea8b5a28eb025f3f9e2a28c4de2f9b7f3028dfb6d04dced8b339a32a762ba66a9b4af7a8470b930a71e1b0573cf7df323f4ab93271aa7451aa21dc9cd6f8086200b7106bf9c7dfe7979a15a236b09c920fb7", 0x17d) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x34f, &(0x7f00000004c0)="$eJzs3M1vG0UYx/FfjO04qZr1AYE4oD4SF7isknDigrBQKyEiUYUa8SIhts0GrCx25LWCjBBpT1w4IP4IDlWPvVWC/gO5cOOAuHDLBYkDPSAWed+8bpzEdes2L9+PVO00M8/ubGazemalmf0Pf/hyazN0N72eSjXTnCQ9kOoqKTOXHktxuaq6hm7qtQt///by+x99/G5jbe3yutmVxrXXV81s6dLPX32zkDa7N6+9+qf7f63+uffC3kv7/137ohVaK7R2p2eeXe/80fOuB75ttMIt1+xq4Huhb6126HeT+mhXCnzbDDrb233z2gsXF7e7fhia1+7blt+3Xsd63b55n3uttrmuaxcXdbz5CdqcZc3b6+teI/3PG889WvCNWfQIjyca80h3uw1vMLYLB2qat59OrwAAwEmS5v95tl8apPTH5P9Fef5fTvL/3yUV8v879fu9Cx/cXUrz/3vVQf4vFfL/z/JT1WQbpTz/r0ka5v+dZH6Q5/8bTyb/P5gRnW7fjw6OoigvVse1H8n/cUYN8v/F9O83duuTO8txgfwfAAAAAAAAAAAAAAAAAAAAAIDT4EEUOVEUOckxWwEeOfPxghwpSusPCX/EJeM4aUbHf/hvwvHHKTfcuKO8JAXf7TR3mskxbXBfUiBfy3L0b/w8pAbl6k0rrqL7JdhN43d3msmrobGpVhy/Ikf1h+Oj6Mo7a5dXzLJdCwrxFS0W41fl6Hlpfkz8qiXy61cGx6pefaUQ78rRrzfUUaCNdGVcFv/titnb763ZaP8X4nYAAAAAAJwFruXq2fy3uIWg6x6sT+bHSX0yvy5r/PeBZH69/PD8PI4vq1R+VncNAAAAAMD5Eva/3vKCwO/OqHBL0lFtyprN1YffMCaNyjbIPaTNnOaefFdrkuJCdvHpzjPo2xRXr4ytqkz0GytN1dVL1ckHpXpoVfbZ6LBwXZ1mLCInHYvHGNMXf/zpn6PbJF/GpElO+Obd2jF3esQjUT6qTfW4O62MvCRKs30HAQAAAHg6hkl/9pO3pMqz7RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfNrPf/K+4sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJx3/wcAAP//QOD4ig==") sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="540100001000010026bd7000000000002001000000f7ffffffffffffff000000000000de0000000000000028002c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000010000000032000000ff0200000000000000000000000000010000000000000000000000000000000004000000000000000200000000000000000000000000000002000000000000000000000000000000ffffffffffffffffff0f0000000000000008000000000000000000000000000000000000000000000300000000000000000000002abd7000000000000a000100260000000000000048000100"], 0x154}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x4) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x0, 0x3, 0x2}}, 0x2e) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xaffa9c0077a76a7d) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, 0x0) 15m28.478070785s ago: executing program 1 (id=2443): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000400000000000000006272696467650000100002800c002100a0000080cf"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x3, 0x2, [0x5, 0x3]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r3, 0x5, 0x1, [0x40]}, 0xa) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15m28.025804605s ago: executing program 1 (id=2453): r0 = memfd_create(&(0x7f00000007c0)='\x9d#MJZ\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x19\xbf\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12\x17\t\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x01\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xf9\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x16\x06\x00\x00\x00\xbf\x8a\xea\xff\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*\x05\x00\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x03\x00\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab\x13F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\x93\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\x0f\xdd\x89Zf G\xa7\x05\x88}\xd9\xce/\x92R\xefM\xcb\xd1\x11Cu\xdf\x13\xe2\xb4\x85+`k~k\xa0\xa9\x13g\xc6\xc9\xa4\x91-\x19\x88\x8a\x8c\xdawp\xe7s\x03j\x98\r3\x16\xee\xf41V\xb2\xfa\'X\x9b\xa6x!@Wm\xe5C\x1b\xad=-\x15\"\xf6t\xf4H\xd4x\xb7\v\xe1\xf4@\x82\xfc\xb3\xfd\x817\b\xf8\xbe\xf9\xee\xc7@\x92\x15.Vd\xaeml\xddF\x97!\x1f\xde\xd1)0\xe6>w\xe5U\xe3>f\xf8\x9f\xe0\x87\x92\xe0\x8e?\x19\xbfQ^\x1bn\xc4\xba\xc3\x04\xdeHi^\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x7}c\x1d\x1e\xb4;}\xe4\x1cd3fk\x8d\xcd\x03H,9\xd1\xf8\xfe\b\x8b_\xd9\x8a\xa0\xe6E\xbfh\xfa\xbeF\xe4\x86\x9b\xe6L\xb5\x8d\x7f\x9a\ak\xaf\x19h\x94\x98\xa1\x1f\x9ce\xac\x17\x98\x94\xa5t|O\x1e\x89\xe6fn2\x99c\x94\x86\xc8\xe8\x82\x0fK(\xa1\xf5\xef\xffn\x1aK\x8fK;\xba3Nz\xeeO[\xb7s\xbc\xc9\xd1\x12Uub\xb7\xee}\xcb\xb0\x0f\x84 \xbb\xd0=\xcf\\GqFK\x1e\xb7\xc5 zM\xa0\x8a\xbaP\x0fp\xa0z4q\xea\xf9\xea$Y^r\xc1\xea[\\\x88\xf6\xbd\xa4\xa4\xa2bI\xe9\x94\xc2\xf0f\x14\xaa\x88PT\x1d>[3\xce\xa5U\xa1jd\x8d\xee\xc9\x13\xe9\xfe\xe7ppf\xaaH\xbd(J\xd2u\xb2jt\xae\xf0\x92\xaf\xe5_\x06\xb1U\xd8#6J\f\"\xa7T\x9e\x11\x88Q\xa0\xe7\x0e\n\xb0\xcclV\x89\xd3\x143\x03\x8d\x8e\x10\x8e\x92\xc5\xb7:ZP\x8bK\x8e\xe7I0>\x05\x19\xecuZ/\x17\x18\xcefo\x8e\xd7\xf2\xba\xa4d p\x1dU\xa3T\xb1\x17i\x9b\x98\v\xc7\xbe\xcc\x19\xc0\xae-\t]\x99\xa5\xd5\xdcM\x99\xa4\xe6\xc9B\xcf7\xf7\xae\xe5\xf8\xd9\x1b\x1f\x97M\xcem\xc5\xcb\xe2\x9c\x93\x99\x93\xbc\x19*\x96\"n\x7f\x1b\b\x17o\xf2r\x9e)\xc5\x15\x99o\xc2\x95U\xe44M\x8b\xf9ddD\xc3-\x88\x00\xc1@\x8f#f\xd4@\xfc\x9d;\xdb\xb2\x11\xf0^\x85~\x8e\xc4\vz\xb9\x12E\xdc\xe9\xe7\x10b\xa8uT\x91\xf8XpLf\xf3@\rV\xb0NYK\x1c&MQ\v\xd4\x19]KW\xc55\x8d\x813`Q\xa8\xc3\xee)h\xca\x04E0\'\x04\xe4\xe7\xee\xb2\xeeO\x87pT\xbdJ\xa1\x96?\x1a\xf7\xcf\x13\xfa[\xa6Y', 0x0) lseek(r0, 0x5bd, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'bridge_slave_1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x24000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400, 0x8, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x5, 0x9f6, 0x38, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x100, 0xffffffff}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff2, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r13 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r14, r14) fchown(r13, r14, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)=@acquire={0x2c8, 0x17, 0x20, 0x70bd27, 0x25dfdbff, {{@in=@private=0xa010100, 0x4d4, 0x3c}, @in6=@local, {@in=@local, @in6=@local, 0x4e24, 0x9, 0x4e22, 0x1, 0xa, 0xa0, 0x80, 0x1, r5, r6}, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0xe30, 0x4e22, 0xc00, 0xa, 0x80, 0x20, 0x2b, r7, r8}, {0x9, 0xe, 0xffffffffffffffff, 0x200, 0x856, 0x8c, 0x6, 0xee}, {0x9, 0x7, 0x10, 0x5}, 0x5, 0x6e6bbd, 0x2, 0x1, 0x3, 0x3}, 0x8, 0x73, 0x6, 0x70bd28}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x4e21, 0xb, 0x4e20, 0x1, 0xa, 0x80, 0xa0, 0x1d, r12, r14}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d3, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x2, 0x7ff, 0x7457, 0x54, 0x7b76, 0x8, 0x0, 0x7}, {0x9, 0xb, 0x7fffffffffffffff, 0xc}, {0x4, 0x2, 0x3}, 0x70bd26, 0x3503, 0x2, 0x3, 0x0, 0x80}}, @sec_ctx={0x81, 0x8, {0x7d, 0x8, 0x0, 0x51, 0x75, "790a1df09b297ce7bec502970bbea94bb7688c6b21e5108c8e4bd7d6b0614e8bafa2fe1e46150b963bd427f3653ff9958e04d2154650ba1310a6e618767652b1014e450d30517b3437bdd88896b6bd94f28105d15163591f88893930fa298bb27639ca81550268602cdff48f7c856f2e9ec9be2053"}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010100}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2c, 0x70bd27, 0x70bd2c, 0x70bd27, 0x40, [0x8000, 0xd7]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040001) 15m27.94569263s ago: executing program 35 (id=2453): r0 = memfd_create(&(0x7f00000007c0)='\x9d#MJZ\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x19\xbf\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12\x17\t\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x01\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xf9\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x16\x06\x00\x00\x00\xbf\x8a\xea\xff\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*\x05\x00\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x03\x00\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab\x13F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\x93\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\x0f\xdd\x89Zf G\xa7\x05\x88}\xd9\xce/\x92R\xefM\xcb\xd1\x11Cu\xdf\x13\xe2\xb4\x85+`k~k\xa0\xa9\x13g\xc6\xc9\xa4\x91-\x19\x88\x8a\x8c\xdawp\xe7s\x03j\x98\r3\x16\xee\xf41V\xb2\xfa\'X\x9b\xa6x!@Wm\xe5C\x1b\xad=-\x15\"\xf6t\xf4H\xd4x\xb7\v\xe1\xf4@\x82\xfc\xb3\xfd\x817\b\xf8\xbe\xf9\xee\xc7@\x92\x15.Vd\xaeml\xddF\x97!\x1f\xde\xd1)0\xe6>w\xe5U\xe3>f\xf8\x9f\xe0\x87\x92\xe0\x8e?\x19\xbfQ^\x1bn\xc4\xba\xc3\x04\xdeHi^\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x7}c\x1d\x1e\xb4;}\xe4\x1cd3fk\x8d\xcd\x03H,9\xd1\xf8\xfe\b\x8b_\xd9\x8a\xa0\xe6E\xbfh\xfa\xbeF\xe4\x86\x9b\xe6L\xb5\x8d\x7f\x9a\ak\xaf\x19h\x94\x98\xa1\x1f\x9ce\xac\x17\x98\x94\xa5t|O\x1e\x89\xe6fn2\x99c\x94\x86\xc8\xe8\x82\x0fK(\xa1\xf5\xef\xffn\x1aK\x8fK;\xba3Nz\xeeO[\xb7s\xbc\xc9\xd1\x12Uub\xb7\xee}\xcb\xb0\x0f\x84 \xbb\xd0=\xcf\\GqFK\x1e\xb7\xc5 zM\xa0\x8a\xbaP\x0fp\xa0z4q\xea\xf9\xea$Y^r\xc1\xea[\\\x88\xf6\xbd\xa4\xa4\xa2bI\xe9\x94\xc2\xf0f\x14\xaa\x88PT\x1d>[3\xce\xa5U\xa1jd\x8d\xee\xc9\x13\xe9\xfe\xe7ppf\xaaH\xbd(J\xd2u\xb2jt\xae\xf0\x92\xaf\xe5_\x06\xb1U\xd8#6J\f\"\xa7T\x9e\x11\x88Q\xa0\xe7\x0e\n\xb0\xcclV\x89\xd3\x143\x03\x8d\x8e\x10\x8e\x92\xc5\xb7:ZP\x8bK\x8e\xe7I0>\x05\x19\xecuZ/\x17\x18\xcefo\x8e\xd7\xf2\xba\xa4d p\x1dU\xa3T\xb1\x17i\x9b\x98\v\xc7\xbe\xcc\x19\xc0\xae-\t]\x99\xa5\xd5\xdcM\x99\xa4\xe6\xc9B\xcf7\xf7\xae\xe5\xf8\xd9\x1b\x1f\x97M\xcem\xc5\xcb\xe2\x9c\x93\x99\x93\xbc\x19*\x96\"n\x7f\x1b\b\x17o\xf2r\x9e)\xc5\x15\x99o\xc2\x95U\xe44M\x8b\xf9ddD\xc3-\x88\x00\xc1@\x8f#f\xd4@\xfc\x9d;\xdb\xb2\x11\xf0^\x85~\x8e\xc4\vz\xb9\x12E\xdc\xe9\xe7\x10b\xa8uT\x91\xf8XpLf\xf3@\rV\xb0NYK\x1c&MQ\v\xd4\x19]KW\xc55\x8d\x813`Q\xa8\xc3\xee)h\xca\x04E0\'\x04\xe4\xe7\xee\xb2\xeeO\x87pT\xbdJ\xa1\x96?\x1a\xf7\xcf\x13\xfa[\xa6Y', 0x0) lseek(r0, 0x5bd, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'bridge_slave_1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x24000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400, 0x8, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x5, 0x9f6, 0x38, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x100, 0xffffffff}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff2, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r13 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r14, r14) fchown(r13, r14, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)=@acquire={0x2c8, 0x17, 0x20, 0x70bd27, 0x25dfdbff, {{@in=@private=0xa010100, 0x4d4, 0x3c}, @in6=@local, {@in=@local, @in6=@local, 0x4e24, 0x9, 0x4e22, 0x1, 0xa, 0xa0, 0x80, 0x1, r5, r6}, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0xe30, 0x4e22, 0xc00, 0xa, 0x80, 0x20, 0x2b, r7, r8}, {0x9, 0xe, 0xffffffffffffffff, 0x200, 0x856, 0x8c, 0x6, 0xee}, {0x9, 0x7, 0x10, 0x5}, 0x5, 0x6e6bbd, 0x2, 0x1, 0x3, 0x3}, 0x8, 0x73, 0x6, 0x70bd28}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x4e21, 0xb, 0x4e20, 0x1, 0xa, 0x80, 0xa0, 0x1d, r12, r14}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d3, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x2, 0x7ff, 0x7457, 0x54, 0x7b76, 0x8, 0x0, 0x7}, {0x9, 0xb, 0x7fffffffffffffff, 0xc}, {0x4, 0x2, 0x3}, 0x70bd26, 0x3503, 0x2, 0x3, 0x0, 0x80}}, @sec_ctx={0x81, 0x8, {0x7d, 0x8, 0x0, 0x51, 0x75, "790a1df09b297ce7bec502970bbea94bb7688c6b21e5108c8e4bd7d6b0614e8bafa2fe1e46150b963bd427f3653ff9958e04d2154650ba1310a6e618767652b1014e450d30517b3437bdd88896b6bd94f28105d15163591f88893930fa298bb27639ca81550268602cdff48f7c856f2e9ec9be2053"}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010100}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2c, 0x70bd27, 0x70bd2c, 0x70bd27, 0x40, [0x8000, 0xd7]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040001) 15m10.074058467s ago: executing program 5 (id=2570): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000013c0), 0x1, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000180)=0x6, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1_to_bond\x00', &(0x7f0000000900)=@ethtool_link_settings={0x4c, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x16, 0xffffffff, 0xfffffffa]}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) 15m10.053468573s ago: executing program 5 (id=2571): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x5}, 0x2002, 0x32, 0x5, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (fail_nth: 6) 15m9.652003002s ago: executing program 5 (id=2573): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x1, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {"1000000000001000"}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) 15m9.637053459s ago: executing program 5 (id=2574): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cf, &(0x7f0000000440)="$eJzs3cFrU1kUx/HfNG2TptMmA8PADMzMZWYx4+bRxj9Ag7QgBpTaFHUhvNoXDXkm5b0QiYjJRtz6dxSX7gTrP9CNuHHvrgiCmy7ESPKSNmnTEtPExvb7gXLP7bmn95Km5aTQm+0bz+7nMr6VsYsaixiNSVXtSPF61PRTcxxrxJNqV9W56U/v/rx+89aVZCq1sGTMYnL5fMIYM/v3qwePnv/zuji98mL2ZVhb8dvbHxPvt37b+n37y/K9rG+yvskXisY2q4VC0V51HbOW9XOWMddcx/Ydk837jteRz7iF9fWysfNrM9F1z/F9Y+fLJueUTbFgil7Z2HftbN5YlmVmojrbxntYk95YWrKTh6ZroYGeCIMX7pxOdVvjeclq92R6Y1jnAgAAo+tg/z/bzNS7/aDXP7z/T60E44D7f4n+f0iqHbPD+//N73UgDJ3nJe1o8+e3E/0/AAAAAAAAAAAAAAAAAAAAAAA/gp1aLVar1WKtsfURlhSR1Jqf9DkxHH1+/y+c0HExYG3/uBeR3KeldCkdjEE+mVFWrhzNKabPjedDUxAvXk4tzJmGieaXrNdXSv/9HMzq9S3xbvV//TIf1BttupXm/pVSekLR9v0TiunX7vsn9upb1yFUSulJ/f9vW72lmN7cUUGu1hrP6736x/PGXLqa2rf/VGMdAAAAAACngWV2xTtf/wZ3P1qNBREdzAf13/D3gX2vr8f1Ry9XVAIAAAAAgGPzyw9ztus6Xh9BWNIxyk9rENJIHGNfcFHSwdSUpFE5YZcgJPX5YEYkBZ8x/ZR/2C3vqarWw5pxSaPxqPYWdPya4I1gAAAAgFNgr+k/atVE5/TtkyGfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAACAs6XX+8Ba69tSoUbQShxR3rYd94gBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgTPsaAAD//zF9FcU=") acct(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17e) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x94) syz_clone(0x40000000, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240), 0x0) lseek(r3, 0x101, 0x1) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) gettimeofday(0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) socket$inet6(0xa, 0x800, 0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) prlimit64(r4, 0x4, &(0x7f0000000040)={0x1, 0x7e}, 0x0) 15m9.374308852s ago: executing program 5 (id=2576): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x10c, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}, 0x6, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) r1 = syz_open_pts(0xffffffffffffffff, 0x10d040) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x3cc78eba55477da8, 0x17, '\x00', [@pad1, @ra, @generic={0x4, 0x7d, "7441640c1e11d5881cace354480516c5b42922a4de27ced318da977b960cb8b30f4471d57859eceefbdc63e8108c4fbb662b24f6bd5b40e10b6c9c052e7fd0a3c567c36ad6804049f1fc4f8d9debe568f0198c55c259c08e86a5bb883a0e4fdbdd4592e58cfa4bcc329ec54ae15e65d9180fd45f4f83c769e885c391d0"}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x8, [0x3, 0x9, 0xba5a]}}]}, 0xc8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x8af2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x3, 0x62, 0x23e}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) recvmmsg(r2, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x2000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x1, {0x0, r4}}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$eJzs3c1vXOW9B/DvGduJMSgJkMvlRkAm4SYY8HVs55LciMW9iT1JzPXLle1IRHdBKHGqKG5pSSsBqtQgVV0VtVKrLtod6qorJDZlU7Frd+2qi0oV/wLqKlIruToz43hsjz2O69gmfD7WzJyX33me33l9NOOZ84Qvl8WDK8YWF+uPLY5f+fUOZMwedmHs848+/rB8fHAn+9KVV4rfJL1Jqkl3kqeTntGxmenJDgXdSq4l+SwpkuxP43VTrqX4cR5bHv8sxS/Lete1b7Ml08kiX2m7ffwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeVIyODQ0NF/syPnXl9WpDUl1jdGxmusji4to5S8s0fFrv9bv4tGO9SVE+0tu71NX304eXZz+VpHo8zzTGnql3SJ7evP/oU4defbK7srT8etn8U/Zvvtjb771/682Fhfl3Hkgie9+l2tT47PT45PlLter47HT13JkzQ6cuX5ytXhyfqM1enZ2rTVZHZ2rn56Znqv2jL1aHz507Xa0NXp2+MnVpbHCitjTx7H+MDA2dqb42+H+18zOz01OnXhucHb08PjExPnWpHlPOLmPOlgfi/47PVedq5yer1Rs3F+ZPr8qpq350tUwog4Y7rUkZNNIpaGRoZGR4eGRk+INm79n3Jpx55dwrZ4eGuodWyci+VREP6KBlb3lk/d28/Rdx2KJKo/1PJjKeqVzJ69mXapu/0YxlJtP525lysbXzm5ba/xOnahvW29r+N1v57pbZR8qn43muOdq7TvvfNtOd/Lud9/J+buXNLGQh83ln1zPa2b9LqWUq45nNdMYzmfP1KdXmlGrO5UzOZChv5HKOZjbVXMx4JlLLbK5mNnOpZbJ+dM2klvOZy3RmUk1/RvNiqhnOuZzL6VRTy2CuZjpXMpVLGcv5eik3crO+3U9vkOO9oOHNBI1sELSmud9E+78yojwpdrQdYs/Z9ms4bNVis/3f1zm0f3QnEgIAAAC23b/9PgcOP/G7vyRFnq1/Ln9xfKI2tNtpAQAAANuo/nW9Z8qXnnLo2RTe/wMAAMDDpqj/xq5I0pejjaGlX0L5EAAAAAAeEvX//z+X4ujyBO//AQAA4CHT+R77HSOKgaXb/1avN16vNyMaY0XfxfGJ2uDo9MSrwzlZv8tA/ZcGa0rrSoqe+s8PXsqxRtSxvsZr33KJZZ29ZdTw4KvDeSnHmyvS/3z58nx/m8iRRuQLjcgXWiO7siLydBkJAA+74xu0x5tt/1/KQCNi4Ei9ye8+0qYNHtKyAsBecTy3m0PNLs3atP/NXnieW6/9/88N3v+XEU/kxtHGVwoG81bezkKuZyDNbxwcbVfqUm8Eja8hDHT4NKCv+ZWFP56tZGDN5wG999a1NXY+Ixlo+4lAS7lFeldsrK5t3vgAsEuOb9gOb679H+jw/n+5zd2/S2sJALS614N924FKM2qjmM4Du7yKAMAqWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfpu6gf8fTiYLC/PJ1u7/v7WB3vvJcOOBSjaI+fvOrM7ODHQl2a3a/zv3vVS5j/fKpjOwcmCXL0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsiCLpaje9kuxPMpTk1M5n9eDc2e0Etkt1a4sVd3M37+bAdqcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBV17z/fyWN10cbk9JdSU4kuZbk/3c7x+10d7cT2DXfqD+33P+/kvRksUh3Y7en6Bkdm5meLHd/sb+c//lHH39YPjqXvbZXhbKAsoYVnUs0a2iZ0rNyqcfrS/WNzd++9Z23v1Udu1A/MC/MXZwYm7w08z/LgU8VnzS6QKgWyxOX8v3eid/+pKXQfc3KPynXtL3V9V6s1zu2tt5/bbf0OvVuws2F+ZGyprna63Pf/ebNd1tmPZFjyfP9Sf/Kmr5ePtap6djq7blS8UXxw+JAfp5r9f1fbo1isSh30cH6+j9y4+bC/OBbby9cv5fT91fkdChHk1xPejef09EU6+VTP+oqPWWtQ/Wg8ulwh/I21FLi8Drb9fH6YdN3X+tQXX8d6jps92ZGp9tm9NNvP5mT972nT3aosa3ii+LPxeX8KT9o6f+jUu7/E2l7drYpoh7ZcqS0zltxelUakfU1H2md8cbqMtc9K+95pGMEm/WjfC3/dW//V1qu/819VTYLD/561FJj+/Miuf/z4lcH17Qoy+ot0uFVLVLz6rPeMs08Dzei1snzX/Jy0n3kvq4oL3e4ojyo8/8XRX/+mjv6/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPa+IulqN72SnEhyKMnBcryaLK6OubOF+ip9xVbS3DZbyfnLp1h3RYu7uZt3c2CnMwIAAAAAAADgwbgw9vlHH39YPur/j+/Kv1eac6pJd5JDxc96Rsdmpic7FNSTXFv6l37v/eVwrXx6bHn8s3Ls6Q4L7e7XBwDgS+0fAQAA//9T8Gpj") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791030000000000071041d0000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 15m9.055439955s ago: executing program 5 (id=2578): socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1) unlinkat(r2, &(0x7f0000000000)='./file1\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x17, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xc, 0xaa0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000300)={r0, r3}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f92d", 0x2}], 0x1}, 0x4000080) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x210000, 0x10, 0x2e}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f00000004c0)={@desc={0x1, 0x0, @auto="4a39af45f0710559"}}) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 15m9.014329138s ago: executing program 36 (id=2578): socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1) unlinkat(r2, &(0x7f0000000000)='./file1\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x17, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xc, 0xaa0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000300)={r0, r3}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f92d", 0x2}], 0x1}, 0x4000080) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x210000, 0x10, 0x2e}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f00000004c0)={@desc={0x1, 0x0, @auto="4a39af45f0710559"}}) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 14m54.394376526s ago: executing program 3 (id=2670): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000019440), 0x0, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f000001b980)={@desc={0x1, 0x0, @desc1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) r8 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9) sendfile(r7, r6, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r9 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x7, 0x3c8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000100000029bd7000fddbdf250a0000cdff000001020001000800060000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$rds(r0, &(0x7f000001bd40)={0x0, 0x0, &(0x7f00000196c0)=[{&(0x7f00000190c0)=""/160, 0xa0}, {&(0x7f0000019180)=""/46, 0x2e}, {&(0x7f00000191c0)=""/19, 0x13}, {&(0x7f0000019200)=""/249, 0xf9}, {&(0x7f0000019300)=""/182, 0xb6}, {&(0x7f00000193c0)=""/103, 0x67}, {&(0x7f0000019440)}, {&(0x7f0000019480)=""/252, 0xfc}, {&(0x7f0000019580)=""/188, 0xbc}, {&(0x7f0000019640)=""/90, 0x5a}], 0xa, &(0x7f000001bbc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0x5}, {&(0x7f0000019780)=""/4096, 0x1000}, &(0x7f000001b8c0)=[{&(0x7f000001a780)=""/4096, 0x1000}, {&(0x7f000001b780)=""/148, 0x94}, {&(0x7f000001b840)=""/102, 0x66}], 0x3, 0x4d, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x10000}, &(0x7f000001b900)=0xcf61, &(0x7f000001b940), 0x1, 0x6, 0x9, 0x200, 0x14, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f000001ba80), 0x4c}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, &(0x7f000001bac0), &(0x7f000001bb00)=0x1, 0x0, 0x3, 0xffff, 0x7, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x7}}], 0x140, 0x8004}, 0x80c0) ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, &(0x7f0000019080)) socket$packet(0x11, 0x3, 0x300) 14m53.149287913s ago: executing program 3 (id=2678): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000000100), 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r2, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffffffc, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40020820}, 0x4000) fallocate(r0, 0x0, 0x0, 0x8800000) r3 = socket$packet(0x11, 0x2, 0x300) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0x4, 0x1}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000000), 0x8) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000200)="800034ca00000000", 0x8, 0x2004c080, &(0x7f0000001280)={0xa, 0x4e21, 0xc9, @mcast2}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) sendmmsg$sock(r4, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}}], 0x1, 0x8800) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) 14m52.828492716s ago: executing program 3 (id=2682): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x6d, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = open(&(0x7f0000000200)='./file1\x00', 0x254801, 0x125) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0049364, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r9, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x8000) write$binfmt_script(r7, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "0d8cf1d43fd21a2c10eded78316aab727e64904ea1214d873d02e141b05bcbc8b0db34abf8eb1c456eed6bbd2009224e9cad14e3743528341eb07f67383e6488b6044dd315d3d2d6c1f2a1215d2a956248a16e2c7dc249e2c979a108afc953ac8269816ba38642a2d118e274"}, 0x1) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x3, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, r10, 0x10, 0xffffffffffffffff, 0x2) 14m51.710181156s ago: executing program 3 (id=2697): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9001}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="d80000000314090528bd7000fcdbdfb92ed69aebc3ce31ef876db03db181250900ff030000000000000000080041007278650014003300776c616e3000000000000000000000000900020073797a300000000008004100727865001400330073797a6b616c6c6572310000000000000900020073797a30000000000800410073697700140033006261746164765f736c6176655f3100000900020073797a320000000008004100727865001400330076657468305f746f5f7465616d0000000900020073797a310000000008004100736977001400330076"], 0xd8}, 0x1, 0x0, 0x0, 0x40800}, 0x2400c801) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x533, &(0x7f0000000880)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oC6GKso43bVT1AOWEKlQJ0SNIqbE3VpTdrJVdl9pEwj1zRaISJzjyB3DuiTsXBDcu5YDEDwtUI3EYNLNjZ2Pv2k7j9Vq7n4802vfmjef7Xpx5b+btel8AE+tKRGxHxExEvB8RC+X+pNzi7e6WH/fZzsOV3Z2HK0lk2Xv/TIryfF/0/EzuUnnOuYj4wXcjfpwcjtve3Lq33GjUH5T5xU5zfbG9uXX9bnN5rb5Wv1+r3Vq6dePNm2/UnqA1c0eWvtScKVNf/fQP26/9NK/WfLmntx2nqdv0yn6c3HREfG8YwUZgqmzPzKgrwueSRsTzEfFycf0vxFTx2zzOO6+dQdUAgCHJsoXIFnrzAMC4S4s5sCStlnMB85Gm1Wp3Du+FuJg2Wu3OtTutjfur3bmyy1FJ79xt1G+Uc4WXo5Lk+aUi/ShfO5C/GRHPRcQvZi8U+epKq7E6yhsfAJhglw6M//+Z7Y7/AMCYO/pjMwDAODL+A8DkMf4DwOQx/gPA5OmO/xee9MeyLPvZMKoDAJwBz/8AMHmM/wAwUb7/7rv5lu2W33+9+sHmxr3WB9dX6+171ebGSnWl9WC9utZqrRXf2dM87nyNVmt96fXY+PDyt9bbncX25tbtZmvjfud28b3et+uV4qjtM2gZADDIcy998uckH5HfulBs0bOWQ2WkNQOGLR11BYCRmRp1BYCR6a721WeBPmDsPXrGf+IPAZgegDFx3B3AXL8/EMqyLBtelYAhu/ol8/8wqcr5/2mfAobJc9z8f7E2sDcJYSxNH13sEQDGWJYlJ13zP056IABwvh1xg3/5LO9DgNEZ8P7/8+Xrb8s3B360evCIj4dZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjf9tb/rZbL/M5HmlarEc8UCwBVkjt3G/UbEfFsRPxptjKb55dGXGcA4Gmlf0vK9b+uLrw6/1jRi5f2kzMR8ZNfvffLD5c7nQd/jJhJ/jW7t7/zcbm/dmywuWG0AAA42t44Xbz2PMh/tvNwZW87y/r8/Tvdu4I87u7OTOzux5+O6eJ1LioRcfHfSZnvSnrmLp7G9kcR8cV+7U9ivpgD6d6yHIyfx37mlOJPnSh++lj8tFygOS3/Lb5wCnWBSfNJ3v+83e/6S+NK8dr/+p8reqinV/Z/+alWdos+8FH8vf5vakD/d+WkMV7//Tvd1IXDZR9FfHk6Yi/2bk//sxc/GRD/1RPG/8tXXnx5UFn264ir0T9+b6zFTnN9sb25df1uc3mtvla/X6vdWrp1482bb9QWiznqxcGjwT/euvbsoLK8/RcHxJ87pv1fH3TSA0+5v/nf+z/82hHxv/lKv/hpvHBE/HxM/MbAFj9u+eLvBj535/FXD7c/Ocnv/9oJ43/6161Dy4YDAKPT3ty6t9xo1B9ISJz/RP5f9hxUo2/i22cVayb6F/38le41faAoyz5XrEE9xmnMugHnwf5FHxH/HXVlAAAAAAAAAAAAAACAvs7iL5ZG3UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADG1/8DAAD//4wA1F8=") r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x4000, 0x808000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x14, 0x3, @fd, 0x7, 0x0, 0x0, 0x8, 0x1, {0x1}}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0xb3, 0x5, 0x8203, 0xffffffff, 0x9, 0x9, 0x4ddc27, 0x3, r7}, &(0x7f0000000100)=0x20) r8 = fsmount(0xffffffffffffffff, 0x0, 0x2) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSSOFTCAR(r9, 0x8925, &(0x7f0000000080)=0x59b) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000400)={0x5, 0x7, 0x29, &(0x7f00000003c0)=""/41}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000440)={0x0, 0x6, 0x40, 0x7, 0xd, "903990de875183f5"}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) fchdir(r8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) fchown(r4, 0x0, 0x0) 14m51.498170328s ago: executing program 3 (id=2698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (fail_nth: 6) 14m49.682214584s ago: executing program 3 (id=2711): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 14m49.266550129s ago: executing program 37 (id=2711): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 7m28.897890942s ago: executing program 9 (id=6764): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff44, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x4, @perf_bp={&(0x7f0000000180), 0x6}, 0xa016, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x5}, r0, 0xe, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440001800150900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x805}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) unshare(0x22020600) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)) 7m27.493986181s ago: executing program 9 (id=6771): socket$igmp(0x2, 0x3, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 7m27.388660212s ago: executing program 9 (id=6772): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r4, 0x15b4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000080020b7080000000000007b8af8ff00000000b708000035fd00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_usb_connect(0x3, 0x48, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r13}, 0x38) 7m24.098217434s ago: executing program 9 (id=6790): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x20, 0x3c, 0x1, @local, @mcast2, {[@routing={0x4, 0x2, 0x0, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}], {0x4e22, 0x0, 0x8}}}}}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) r6 = socket(0x1, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000040), 0x3, 0x5f3, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAyu02kO4RsgiD+WSSxxsCMGAZTtKTCJhJHKJFOUSRZFyyiHkv0hQuHJKTjnkklOEhJKIY6RM1DPdfvb47WlE/37SMN1V065q7G+quqaqJ4DKGkr/qUUcjYiZJGIwWVzK644sc6j1uie/vncpfSTRaLz0cxJJlpa/PsmeB7KD+yLi22+SONK1vty5hVvXJqanp2az/ZH56zMjcwu3Tl69PnFl6srUjbH/jp07e+bsudFTOzqv2wVpF+6++fbgB+OvfvHZb8nolz+MJ/FcPJ+9cOV57JWhGGr+nyTrswbO7XVhJenK/k4ajUYjT0u6y60TW5f//noi4q8xGF2x/MsbjPdfKLVywL5q9LXeu4EqSsQ/VFTeD8iv7ddeB9dK6ZUAnfD4fGsAYH38d7fGBqOvOTZw8EkSK4d1kojY2cjcaoci4uGD8buXH4zfjX0ahwOKLd6JiL8VxX/SjP969EW9Gf+1VfGf9gsuZs9p+ovbLPdA9rx2qFj8Q+e04r9vw/iPNvH/Wvp8uxXDr++w/Pry5hv9q+K/f6enBAAAAAAAAJV1/3xE/Kfo8//a0vyfKJj/M5DNHyxaZ7cdQ2v213/+X3u0yyKANh6fj/h/4fzfWj77t961YglrPXqSy1enp05FxJ8i4kT0HEj3Rzco4+SHRz5tlzeUzf/LH2n5D7O5gFk9HnUfWH3M5MT8xC5OGcg8vhPx98L5v8lS+58UtP/pO8PMFss48q97F9vlbR7/wH5pfB5xvLD9X75rRbLx/TlGmv2BkbxXsN4/3v3oq3bl7zT+3WICdi9t/w9uHP/1ZOX9eua2X8bphe5Gu7yd9v97k5ebdxXqzdLemZifnx2N6E0udKWpy+k9MTu2/TrDs6gZJ2PL8ZLG/4l/bjz+V9T/74+IxTU/O/ll9Zri3F9+H/ixXX30/6E8afxPbqv93/7G2L361+3K31r7f6bZ1p/IUoz/QcsneZj2rk4vCMfuoqxO1xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngW1iDgUSW14abtWGx6OGIiIP8fB2vTNufl/X7751o3JNK/5/f+1/Jt+B1v7Sf79//UV+2Nr9k9HxOGI+Lirv7k/fOnm9GTZJw8AAAAAAAAAAAAAAAAAAABPiYE26/9TP3WVXTtg33WXXQGgNAXx/10Z9QA6T/sP1SX+obrEP1SX+IfqEv9QXeIfqkv8Q3WJfwAAAAAAeKYcPnb/+yQiFv/X33ykerO8nlJrBuy3WtkVAErjFj9QXab+QHW5xgeSTfL72h602ZEbmbm0i4MBAAAAAAAAAAAAoHKOH7X+H6rK+n+oLuv/obry9f/HSq4H0Hmu8YHYZCV/4fr/TY8CAAAAAAAAAAAAAPbS3MKtaxPT01OzNl55OqrRyY1Go3E7/St4Wuqz9xtJNkO9I4XmU+E7f6a9WznBfK3f1n5yee9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAan8EAAD//7EAK0g=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_clone(0x82080, &(0x7f0000000440)="4fd9d3a5cd39347ad0e0cd7d6b7576d4c51df15ac8857d85385dda8e6873b32ace9369c008fb91a91d2aec9d1ac6060b55b63bc064024791ec9bd74f7145c5d09ef82d8c486babc2f7e755badf96fab68e3b5e479c8a07501f6485df5f265bde8fe76365de012e696daa6bbb076ae4fa1650a3763c96a81ce23c5e1c459d579ca92a2f47c597a8b0e4e20e3320fe8e533fc4a5a068a4097bd3110c1473e5e5fa63072cb7ee27bda2742adfbbcd57fb88331dc737120f9e82dd920c5efcab2463be86fb3b6442cb0f49677442c940bb99538646728cc79ef107cca7a81aa59f9e", 0xe0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000540)="25994d6f18d71917dc7b20eb8c7221094bd4ea95e61716041d630ab3792446819d927f564336da120d86b7bdcf81ca7f578362f48f3f2c8cee4631a4a32c1591bc8d4d8a067e5c0c3ced994f29b8") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x8, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x2, 0x1, {0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4f}, 0x28) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 7m23.773967536s ago: executing program 9 (id=6791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4000, @multicast2}}, 0x24) dup(r0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m23.40181106s ago: executing program 9 (id=6793): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffd, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x8, 0x80000) 7m23.390377048s ago: executing program 38 (id=6793): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffd, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x8, 0x80000) 4m41.091343341s ago: executing program 0 (id=7614): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x1a0, r2, {0x2, 0x4e21, @loopback}, 0x2, 0x1, 0x3, 0x1}}, 0x26) 4m40.987192123s ago: executing program 0 (id=7617): sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x60008848) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10002, &(0x7f0000000180)={[], [{@seclabel}, {@dont_hash}]}, 0x0, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) unshare(0x22020400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x98, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fff}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3000000008000300", @ANYRES32=0x0, @ANYBLOB="06003600350000000600360027000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00010000000000001c001280090001007866726d000000000c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4m38.466073222s ago: executing program 0 (id=7624): socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x41b, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000}, 0x10c082, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r6, 0x409, 0x4) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$kcm(0x11, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(r7, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) ftruncate(r4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m37.565964971s ago: executing program 0 (id=7628): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x835ce000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) mmap$IORING_OFF_SQES(&(0x7f00001d1000/0x2000)=nil, 0x2000, 0x4db4ac0582748ee4, 0x100010, r1, 0x10000000) close(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000040)='[\\+{\x87\\\x00', 0x4) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x168) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x82101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x236f003, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) recvfrom$l2tp(r1, &(0x7f00000004c0)=""/68, 0x44, 0x60, 0x0, 0x0) 4m36.696047046s ago: executing program 0 (id=7631): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) 4m35.917926067s ago: executing program 0 (id=7633): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffd, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m35.917566047s ago: executing program 39 (id=7633): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffd, 0x353}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.385517918s ago: executing program 2 (id=9288): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 5.352250106s ago: executing program 2 (id=9307): syz_open_dev$sg(&(0x7f00000060c0), 0xf18, 0x8002) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x18, 0x4, 0xfffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000089) r4 = syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x5e, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r6, 0x0) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000004080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="ac7766646e6f3d", @ANYRESHEX=r5]) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}, 0x1000}], 0x1, 0x140, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1dd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x4) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x4, 0x0, 0x9, 0x3}]}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000200), 0x0, 0x8020) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) 4.634434008s ago: executing program 8 (id=9310): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000001c0)='M', &(0x7f00000009c0)='./file2\x00', r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82882, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000003c0)={r6, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0xc, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) readv(r0, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) 4.546090832s ago: executing program 8 (id=9311): r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x48) 4.502049724s ago: executing program 8 (id=9312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffc, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x2, 0x5}, {0xffff, 0xc}, {0x8}}}, 0x24}}, 0x40004) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x2, 0xfffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000010000000000009f09000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008520"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001040)={r0, &(0x7f00000032c0), &(0x7f0000001000)=@tcp=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="370000f040000100fcff0700049b7abc02000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.440107863s ago: executing program 2 (id=9313): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xb0}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 4.36911398s ago: executing program 8 (id=9314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x7f, 0x0, 0x9}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) recvmmsg(r6, &(0x7f0000001e40), 0x0, 0x40010021, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}, 0xa45}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 4.298125718s ago: executing program 2 (id=9315): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020100006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7ffffffd, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000002c0)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x3a}, &(0x7f0000000140)=""/209, 0xd1, &(0x7f0000000240)=""/29, &(0x7f0000000280)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) write$tun(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="4abc006f00650000072f"], 0x6f) 4.098961812s ago: executing program 2 (id=9317): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r5, 0x15b4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000080020b7080000000000007b8af8ff00000000b708000035fd00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_usb_connect(0x3, 0x48, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r11) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r14}, 0x38) 3.962116838s ago: executing program 7 (id=9320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x40080) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@sysvgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@appraise_type}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") fcntl$setlease(r2, 0x400, 0x2) 3.283584347s ago: executing program 6 (id=9321): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) (fail_nth: 3) 3.001310966s ago: executing program 7 (id=9322): r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x48) 2.96795979s ago: executing program 7 (id=9323): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2000}, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd0010100}, 0x0) 2.949739707s ago: executing program 6 (id=9324): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000200)={0x138}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x1, 0x5, 0x21, @mcast1, @mcast1, 0x20, 0x7, 0x6, 0x4}}) 2.793321999s ago: executing program 7 (id=9327): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4084) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r4}, 0x18) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000015fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002be901"], 0xa0}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = semget$private(0x0, 0x5, 0x0) semop(r8, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r8, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semtimedop(r8, &(0x7f0000000080)=[{0x3, 0x8, 0x2c00}, {0x3, 0x1, 0x1800}], 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x80, 0x14880) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) 2.765072244s ago: executing program 8 (id=9328): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = io_uring_setup(0x618c, &(0x7f00000000c0)={0x0, 0xd910, 0x1, 0x3, 0x800001db}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x25, &(0x7f0000000000)={0x1, r1, 0x0, {0xfffffffffffffffd, 0x7}, 0x1}, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f00000001c0)={[0xfffffffffffffffd]}, 0x0, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x210a, 0x75, 0x10ffe, 0x0, 0xb40, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x7, &(0x7f0000000080)={0xe, 0x0, 0x4}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r5, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)={0x6}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000003000000020000000000000e01000400070000000a00000000000011020000000a0000000b000000ff7f00000000000006000000000000"], &(0x7f0000000300)=""/159, 0x4b, 0x9f, 0x1, 0x3}, 0x28) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x2172, r8, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.74335913s ago: executing program 6 (id=9329): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x80, 0x6, 0x9, {{0x7, 0x4, 0x1, 0x0, 0x1c, 0x68, 0x0, 0x2, 0x2f, 0x0, @broadcast, @multicast1, {[@noop, @generic={0x89, 0x3, "dc"}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x1, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast1, @multicast2}}}}) setpgid(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/37) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140)="c3b837fd", 0x4) 2.558333107s ago: executing program 6 (id=9331): sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x60008848) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10002, &(0x7f0000000180)={[], [{@seclabel}, {@dont_hash}]}, 0x0, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) unshare(0x22020400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x98, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x7c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fff}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000ff", @ANYRES32=0x0, @ANYBLOB="00010000000000001c001280090001007866726d000000000c0002800800"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.322172845s ago: executing program 4 (id=9333): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) 2.321698545s ago: executing program 4 (id=9334): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0xe, 0x7fff0000}]}) syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11eba, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.310849674s ago: executing program 7 (id=9335): socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000003c0)=0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 695.662004ms ago: executing program 6 (id=9336): r0 = syz_io_uring_setup(0x49d, &(0x7f0000000300)={0x0, 0xf52a, 0x80, 0x3, 0x2000033f}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0x1764, 0x4b, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x800022) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0xa) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000080)) 283.582581ms ago: executing program 6 (id=9337): sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0xa4ff, 0x0, 0x600}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40010) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x6, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be"}]}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000b00)='./file0\x00', 0x800000, &(0x7f0000000c80)=ANY=[@ANYBLOB='allow_utime=00000000000000000162147,uni_xlate=0,shortname=mixed,shortname=winnt,iocharset=macturkish,nonumtail=0,iocharset=cp862,uni_xlate=0,iocharset=utf8,errors=continue,shortname=mixed,shortname=win95,sys_immutable,utf8=0,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB=',masW=MAY_WRIfP,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c636f6e746578743d73797374656d5f752c736d61636b66736465663d2c00dc428191995a4840e4b495695716ca6f81613dcee890d02f6055d60b84fb62b76f17bd5a95cd9f831bc5404a7b08bff3b734abfc7a89fa2b"], 0x1, 0x373, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) io_setup(0x3, &(0x7f0000000600)) 283.09282ms ago: executing program 7 (id=9338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x7f, 0x0, 0x9}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) recvmmsg(r6, &(0x7f0000001e40), 0x0, 0x40010021, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}, 0xa45}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 248.773364ms ago: executing program 4 (id=9339): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e1c, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendto$l2tp(r0, &(0x7f0000001040)="a6", 0x1, 0x8000000, 0x0, 0x0) 206.495127ms ago: executing program 4 (id=9340): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179", 0x2d}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a22d20f77d9a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808cde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c4c3271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="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", 0x161}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a", 0xa3}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07db", 0x43}], 0x3}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="42e013913edbeb683c44e18ae800a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d28731", 0x5b}], 0x1}}], 0x3, 0x46090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000008c0)="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", 0x10b, 0x800, 0x0, 0x0) 174.802671ms ago: executing program 8 (id=9341): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x10, 0x3, 0x23}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x8c000) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000140)={0x3, 0x6}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 116.19474ms ago: executing program 4 (id=9342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002d40)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000001640)={0x16bc, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x169c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x164, 0x4, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xd7, 0x2, "58581363102f872e7f551295502a367e1c6af6a0e21233a290afb30892f76bcd14cacc1419b11b83581e473f044eed9db55a397caec309180c76c65be2df94b9568cd0631128830dabab59d1201914db6e6a25afae63123681a0d73cc481a6e621e51b9e9dd40de95663ea7bd3ee27e47556367fbf9f47c1a0659dc175e71db826993e7eecb9ae6beab97997d445558ff622e0398aafe91e1e9dde6e819fb3d0f3674de14f8c820e56fe6a46c9db98cd094ce314687cd82c65de8b5b7799ed6122206c6797ab581ec263bb6b6953c365102558"}, @NL80211_PKTPAT_PATTERN={0x1a, 0x2, "6f717bc53dc4c035e186401a1433d5dde8bb9ef5ada7"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1c, 0x1, "bf364c460acedd84c6350fd92e1c6188144fa04684356145"}, @NL80211_PKTPAT_MASK={0x2f, 0x1, "1ddaa6d655f5d2b29f7727928459b754b79e0575159b19e5a8227ada6639deab77109695003fd748c22248"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x84, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x2}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010100}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x5c, 0x8, {0x7f, 0x5e, "1a2d595362d38d46d7c6ab1e7296a6925eaacb0f20fd858e0e2b3f09eeeeb1991d94e574b2df739787e22ac979f2b848e316e18d42d5956942269f64a7ef87d80443a56397476d6bd00275f249a8b74c"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x8, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1498, 0x4, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7bf903f0}, @NL80211_PKTPAT_MASK={0x26, 0x1, "9d844e9b4fb8cef072dc431a0964aeae041749a2c72f1aeacbfa8b12641075f630a8"}, @NL80211_PKTPAT_MASK={0x66, 0x1, "fc160d986b5864cf449f85ffbaa535f761db4de20305d46e160caff46ae3726eb0ccf4b86035133dbb8eeb95ee98a0175fb431952df4c7a6c87f8800a369ca62016bc0637aa7390c9c20265c365a480622a7a3a81e42c3e8b4e1061212a807d08f99"}, @NL80211_PKTPAT_PATTERN={0xe8, 0x2, "7464839b485104937cc130fb7fd9f87761700ae21a66ed6444e818dc342c3552441158fdc94782a08bf6c6d0d090f82d8f0e01166cf4f39e1268118ef28f81b6e54cda52a128c23c10052deb9708f695652f08a72a018cdfd4abb8199a3acc1bb6efe650cb27ed70106d428a9bd40441d4a41e2d59739bdf5f6f472d35bbd93e920e0014d9137804d2f91d5d2f3c3a8b96c0b53e4f6e19f00c80b49047dc3b30539d14c81badafc36a14d543e4b26232acc965ba0f94d45159eaef9c824a8a09cf5bdbb4163f649d8b8b73ca0d5607c5dc32b57e1a474ff5cefdb9a6abc90eac4febfa63"}, @NL80211_PKTPAT_MASK={0x15, 0x1, "015663b97e81cebf68b4bdd56310f0f47b"}, @NL80211_PKTPAT_PATTERN={0x6, 0x2, 'X!'}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x24000000}]}, {0x1008, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xf2, 0x1, "53c8a806b04aaaf28de40429fe453bcf703a05814001d82f28f18417c5e710f5d9f4c5c19936f03af52fc0ca528ce143325cf29d000720eb48d026a75f7294386551eec81939cc9865d9d85f386fc12c39f4bc6cb74c9defe372221f3da73faa900b92b797fe88686f03740a36b9bfb409ec5901df348733c9be4089374c226f376ba745819b78131d9ad96ffe08537b02c1c05e898dd30bbc67bbe12baca24d8807c622bf384dc6d7fd206b36c5919e6bc60bae5c1d8932d49cd9b821333f2b26773b648a0c764fbcb00c9bcbbe809007e1a61341805c0bc2deb7b71680563aff9b2d7c52d094cde9bf625b6182"}, @NL80211_PKTPAT_MASK={0xb8, 0x1, "89038847e532a30ce4e03bb21246c2d34d3d47382e82ed52b4e4e4db82b21d8a0d4b307a50ed90c149db80b6e82d2fad2e8b95fcf4dbb38c8859a50ceb750b18ba3092f539f01a145dd80ae58f030650ddc69edec54d89e91cc2d0f9ad1c9aea6699084fc44967f435644806a1926afe7aeebac848bd3586f06dba79ed5e632b77ff2aa598c91a2946194dc3431f59b01e3df2a56ed07225b582db5bc3077632dd805e61f5adb1540ca6482bd3bd03682f41e9bb"}, @NL80211_PKTPAT_MASK={0xf, 0x1, "0b2e73c3e3f87a60da998d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10000}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x8e, 0x2, "4b82d2d30dc6300d01b9150d9aed7c661859ea2662b94b98f48aa9e77f4f6713982c52d602e4f557a6bd7bd90155ca499a903155a244524a2e8a8cfb1cac6c28e75666130cfab33b6daa8ca00a16697089461beb1d363fbce70293199a3e37e179ad8eb4a78a3a3179732a4adef65b346edd8ab4e63e239d9a94a31ac7abaf0d1760f9b024c256224b35"}, @NL80211_PKTPAT_PATTERN={0x77, 0x2, "65397133b841a613aaff531ee3b9cdd4fa6d0063936eb21ffc6268391fd459936db6275c7f2036bd59b83e283b759478d1984abb41acb2cf8f6ca918c33acd0de9c4ced382209029bab5cc31cc2d22fbb3d2e8b59b3a057b7bf703c8499d026546ec58b1665e1bf552c391ff741da99d16fe3d"}]}]}]}]}, 0x16bc}}, 0x4001) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) 76.956924ms ago: executing program 4 (id=9343): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1227, &(0x7f00000024c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec3", 0x4b) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) eventfd(0x1ff) r6 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) 0s ago: executing program 2 (id=9344): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000c40)=ANY=[@ANYBLOB="6d61703d6f66662c636865636b3d72656c61786564006e6f6a6f6c6965742c6d61703d6ff0a2b466662c73657373696f6e3d3078303030303030303030303030303036302c696f636861727365743d6d6163677265656b412203bc91fde777b21d626c6f636b3d3078303030303030283030303030306330302c696f636861727365743d69734f383835392d322c73657373696f6e3d3078303030303030303030303030090035632c73686f776173736f632c696f636861727365743d6d6163637972696c6c69632c636865636b3d7374726963742c6673636f6e7428a4743d73797374656d5f752c7065726d69745f64697265637469"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (fail_nth: 8) kernel console output (not intermixed with test programs): netlink: 24 bytes leftover after parsing attributes in process `syz.4.8827'. [ 1204.310026][ T1187] loop6: detected capacity change from 0 to 512 [ 1204.335251][ T1187] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1204.882502][ T1187] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 1205.067380][ T1203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8838'. [ 1205.243146][ T1210] loop7: detected capacity change from 0 to 512 [ 1205.288174][ T28] audit: type=1400 audit(1772960627.929:19836): avc: denied { read write } for pid=1216 comm="syz.2.8842" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1205.336568][ T28] audit: type=1400 audit(1772960627.929:19837): avc: denied { open } for pid=1216 comm="syz.2.8842" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1205.400620][ T1225] FAULT_INJECTION: forcing a failure. [ 1205.400620][ T1225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.420944][ T28] audit: type=1326 audit(1772960628.069:19838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1183 comm="syz.6.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1205.423183][ T1225] CPU: 1 UID: 0 PID: 1225 Comm: syz.7.8845 Tainted: G W syzkaller #0 PREEMPT(full) [ 1205.423317][ T1225] Tainted: [W]=WARN [ 1205.423384][ T1225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1205.423396][ T1225] Call Trace: [ 1205.423403][ T1225] [ 1205.423411][ T1225] __dump_stack+0x1d/0x30 [ 1205.423439][ T1225] dump_stack_lvl+0x95/0xd0 [ 1205.423462][ T1225] dump_stack+0x15/0x1b [ 1205.423485][ T1225] should_fail_ex+0x263/0x280 [ 1205.423508][ T1225] should_fail+0xb/0x20 [ 1205.423529][ T1225] should_fail_usercopy+0x1a/0x20 [ 1205.423553][ T1225] _copy_from_user+0x1c/0xb0 [ 1205.423635][ T1225] snd_seq_write+0x1d5/0x560 [ 1205.423667][ T1225] vfs_writev+0x42b/0x900 [ 1205.423728][ T1225] ? __pfx_snd_seq_write+0x10/0x10 [ 1205.423762][ T1225] do_writev+0xe9/0x210 [ 1205.423786][ T1225] __x64_sys_writev+0x45/0x50 [ 1205.423810][ T1225] x64_sys_call+0x1c0c/0x3020 [ 1205.423836][ T1225] do_syscall_64+0x12c/0x370 [ 1205.423931][ T1225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.423961][ T1225] RIP: 0033:0x7f197fcdc799 [ 1205.423992][ T1225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.424010][ T1225] RSP: 002b:00007f197e72f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1205.424032][ T1225] RAX: ffffffffffffffda RBX: 00007f197ff55fa0 RCX: 00007f197fcdc799 [ 1205.424100][ T1225] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000004 [ 1205.424147][ T1225] RBP: 00007f197e72f090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.424161][ T1225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.424174][ T1225] R13: 00007f197ff56038 R14: 00007f197ff55fa0 R15: 00007ffee9a84258 [ 1205.424192][ T1225] [ 1205.626838][ T28] audit: type=1326 audit(1772960628.069:19839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1183 comm="syz.6.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1205.658516][ T28] audit: type=1326 audit(1772960628.069:19840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1183 comm="syz.6.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1205.712716][ T28] audit: type=1326 audit(1772960628.069:19841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1183 comm="syz.6.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1205.755533][ T28] audit: type=1326 audit(1772960628.069:19842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1183 comm="syz.6.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1205.779400][ T28] audit: type=1326 audit(1772960628.069:19843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1183 comm="syz.6.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1205.973624][ T1249] loop4: detected capacity change from 0 to 128 [ 1205.984097][ T1250] loop7: detected capacity change from 0 to 512 [ 1205.991043][ T1249] ext4: Unknown parameter 'dont_hash' [ 1206.001104][ T1250] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1206.014357][ T1251] EXT4-fs: inline encryption not supported [ 1206.049384][ T1251] EXT4-fs: Ignoring removed bh option [ 1206.168588][ T1251] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1206.409353][ T1251] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1206.537529][ T1266] FAULT_INJECTION: forcing a failure. [ 1206.537529][ T1266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.537847][ T1251] EXT4-fs error (device loop6): ext4_quota_enable:7192: comm syz.6.8851: inode #2304: comm syz.6.8851: iget: illegal inode # [ 1206.565191][ T1266] CPU: 0 UID: 0 PID: 1266 Comm: syz.8.8857 Tainted: G W syzkaller #0 PREEMPT(full) [ 1206.565222][ T1266] Tainted: [W]=WARN [ 1206.565230][ T1266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1206.565245][ T1266] Call Trace: [ 1206.565253][ T1266] [ 1206.565264][ T1266] __dump_stack+0x1d/0x30 [ 1206.565367][ T1266] dump_stack_lvl+0x95/0xd0 [ 1206.565391][ T1266] dump_stack+0x15/0x1b [ 1206.565415][ T1266] should_fail_ex+0x263/0x280 [ 1206.565589][ T1266] should_fail+0xb/0x20 [ 1206.565610][ T1266] should_fail_usercopy+0x1a/0x20 [ 1206.565639][ T1266] _copy_from_iter+0xcf/0xea0 [ 1206.565670][ T1266] ? should_fail_ex+0xd9/0x280 [ 1206.565695][ T1266] ? should_failslab+0x8c/0xb0 [ 1206.565715][ T1266] ? __kmalloc_noprof+0x1e3/0x4e0 [ 1206.565735][ T1266] ? kernfs_fop_write_iter+0xe2/0x300 [ 1206.565850][ T1266] kernfs_fop_write_iter+0x125/0x300 [ 1206.565894][ T1266] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1206.565930][ T1266] vfs_write+0x5a6/0x9f0 [ 1206.566029][ T1266] ksys_write+0xdc/0x1a0 [ 1206.566050][ T1266] __x64_sys_write+0x40/0x50 [ 1206.566072][ T1266] x64_sys_call+0x27e1/0x3020 [ 1206.566146][ T1266] do_syscall_64+0x12c/0x370 [ 1206.566196][ T1266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.566220][ T1266] RIP: 0033:0x7f2bfe3dc799 [ 1206.566240][ T1266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.566268][ T1266] RSP: 002b:00007f2bfce37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1206.566292][ T1266] RAX: ffffffffffffffda RBX: 00007f2bfe655fa0 RCX: 00007f2bfe3dc799 [ 1206.566310][ T1266] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000008 [ 1206.566323][ T1266] RBP: 00007f2bfce37090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.566335][ T1266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.566347][ T1266] R13: 00007f2bfe656038 R14: 00007f2bfe655fa0 R15: 00007ffe5eedbb28 [ 1206.566371][ T1266] [ 1207.741089][ T1251] loop6: lost filesystem error report for type 5 error -117 [ 1207.748431][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1207.762221][ C0] EXT4-fs (loop6): initial error at time 1772960630: ext4_quota_enable:7192 [ 1207.771022][ C0] EXT4-fs (loop6): last error at time 1772960630: ext4_quota_enable:7192 [ 1207.835108][ T1251] EXT4-fs (loop6): Remounting filesystem read-only [ 1207.996045][ T1251] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1208.036501][ T1251] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1208.050033][ T1295] set_capacity_and_notify: 1 callbacks suppressed [ 1208.050092][ T1295] loop8: detected capacity change from 0 to 512 [ 1208.068834][ T1251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1208.088853][ T1295] EXT4-fs: Ignoring removed nobh option [ 1208.109613][ T1295] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1208.127616][ T3414] IPVS: starting estimator thread 0... [ 1208.165237][ T1295] EXT4-fs (loop8): 1 truncate cleaned up [ 1208.188017][ T1295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1208.299900][ T1299] IPVS: using max 2544 ests per chain, 127200 per kthread [ 1209.299931][T28382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.326165][ T855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.443432][T13668] IPVS: starting estimator thread 0... [ 1209.530826][ T1323] loop8: detected capacity change from 0 to 128 [ 1209.592209][ T1323] ext4: Unknown parameter 'dont_hash' [ 1209.623543][ T1320] serio: Serial port ttyS3 [ 1209.858525][ T1316] IPVS: using max 2784 ests per chain, 139200 per kthread [ 1210.498963][ T1342] audit_log_lost: 69 callbacks suppressed [ 1210.498986][ T1342] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 1210.535510][ T1342] audit: out of memory in audit_log_start [ 1210.670625][ T1359] loop2: detected capacity change from 0 to 128 [ 1210.711580][ T1360] loop4: detected capacity change from 0 to 128 [ 1210.716524][ T1361] loop6: detected capacity change from 0 to 1024 [ 1210.785704][ T1361] EXT4-fs: inline encryption not supported [ 1210.928459][ T1361] EXT4-fs: Ignoring removed bh option [ 1210.939900][ T1361] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1211.030208][ T1361] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1211.058100][ T1361] EXT4-fs error (device loop6): ext4_quota_enable:7192: comm syz.6.8880: inode #2304: comm syz.6.8880: iget: illegal inode # [ 1211.078440][ T1361] loop6: lost filesystem error report for type 5 error -117 [ 1211.078611][ T1361] EXT4-fs (loop6): Remounting filesystem read-only [ 1211.092445][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1211.092466][ C0] EXT4-fs (loop6): initial error at time 1772960633: ext4_quota_enable:7192 [ 1211.092492][ C0] EXT4-fs (loop6): last error at time 1772960633: ext4_quota_enable:7192 [ 1211.116196][ T1361] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1211.131499][ T1361] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1211.138812][ T1361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1211.518769][T28382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.569669][ T1371] syzkaller0: entered promiscuous mode [ 1211.576346][ T1371] syzkaller0: entered allmulticast mode [ 1211.918998][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1212.869910][ T1387] loop6: detected capacity change from 0 to 164 [ 1212.881067][ T1387] iso9660: Unknown parameter 'j' [ 1212.918034][ T1396] loop2: detected capacity change from 0 to 7 [ 1212.966174][ T1396] loop7: detected capacity change from 0 to 2048 [ 1213.019412][T29605] loop7: p1 p2 [ 1213.027031][ T1396] loop7: p1 p2 [ 1213.381183][ T1407] loop6: detected capacity change from 0 to 1024 [ 1213.404449][ T1407] EXT4-fs: inline encryption not supported [ 1213.431016][ T1407] EXT4-fs: Ignoring removed bh option [ 1213.457665][ T1407] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1213.503280][ T1407] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1213.522074][ T1407] EXT4-fs error (device loop6): ext4_quota_enable:7192: comm syz.6.8896: inode #2304: comm syz.6.8896: iget: illegal inode # [ 1213.570870][ T1407] loop6: lost filesystem error report for type 5 error -117 [ 1213.578456][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1213.592654][ C0] EXT4-fs (loop6): initial error at time 1772960636: ext4_quota_enable:7192 [ 1213.602145][ C0] EXT4-fs (loop6): last error at time 1772960636: ext4_quota_enable:7192 [ 1213.698503][ T1407] EXT4-fs (loop6): Remounting filesystem read-only [ 1213.715018][ T1407] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1213.745824][ T1407] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1213.773433][ T1407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1214.078082][T28382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.162151][ T1418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8900'. [ 1214.335338][ T28] audit: type=1400 audit(1772960636.979:19913): avc: denied { block_suspend } for pid=1420 comm="syz.6.8901" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1214.416408][ T1430] loop6: detected capacity change from 0 to 256 [ 1214.926574][ T1435] loop7: detected capacity change from 0 to 1024 [ 1214.944547][ T1435] EXT4-fs: Ignoring removed orlov option [ 1214.974955][ T1435] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1215.001973][ T1435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.029235][ T28] audit: type=1400 audit(1772960637.669:19914): avc: denied { rename } for pid=1434 comm="syz.7.8904" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1215.059893][ T28] audit: type=1400 audit(1772960637.669:19915): avc: denied { unlink } for pid=1434 comm="syz.7.8904" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1215.204331][T30065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.223489][ T1448] syzkaller0: entered promiscuous mode [ 1215.229115][ T1448] syzkaller0: entered allmulticast mode [ 1215.252494][ T1450] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8909'. [ 1215.276628][ T1450] sg_write: data in/out 65525/120 bytes for SCSI command 0x0-- guessing data in; [ 1215.276628][ T1450] program syz.7.8909 not setting count and/or reply_len properly [ 1215.391507][ T1461] loop8: detected capacity change from 0 to 512 [ 1215.406542][ T1467] loop6: detected capacity change from 0 to 128 [ 1215.425202][ T1470] loop4: detected capacity change from 0 to 128 [ 1215.434274][ T1461] vfat: Unknown parameter '-÷' [ 1215.449960][ T1470] ext4: Unknown parameter 'dont_hash' [ 1217.115862][ T1493] syzkaller0: entered promiscuous mode [ 1217.123691][ T1493] syzkaller0: entered allmulticast mode [ 1217.242338][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8923'. [ 1218.356005][ T1489] loop8: detected capacity change from 0 to 8192 [ 1218.975189][ T1512] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(15) [ 1218.981862][ T1512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1218.995095][ T1517] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8929'. [ 1219.000216][ T1512] vhci_hcd vhci_hcd.0: Device attached [ 1219.062871][ T1518] serio: Serial port ttyS3 [ 1219.071906][ T1512] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(17) [ 1219.078539][ T1512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1219.123773][ T1512] vhci_hcd vhci_hcd.0: Device attached [ 1219.163871][ T1512] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(19) [ 1219.170528][ T1512] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1219.192767][ T1509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1219.201157][ T1512] vhci_hcd vhci_hcd.0: Device attached [ 1219.207941][ T1509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.218611][ T1512] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(21) [ 1219.226052][ T1512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1219.232531][ T1512] vhci_hcd vhci_hcd.0: Device attached [ 1219.256735][ T1512] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(23) [ 1219.263388][ T1512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1219.271934][ T1512] vhci_hcd vhci_hcd.0: Device attached [ 1219.278483][ T3414] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 1219.286125][ T1512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1219.294987][ T1512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1219.304026][ T1512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1219.319945][ T1531] vhci_hcd: connection closed [ 1219.320142][ T12] vhci_hcd vhci_hcd.6: stop threads [ 1219.330246][ T1514] vhci_hcd: connection reset by peer [ 1219.332543][ T1519] vhci_hcd: connection closed [ 1219.335569][ T1526] vhci_hcd: connection closed [ 1219.336111][ T1528] vhci_hcd: connection closed [ 1219.345624][ T12] vhci_hcd vhci_hcd.6: release socket [ 1219.363707][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 1219.375750][ T12] vhci_hcd vhci_hcd.6: stop threads [ 1219.381190][ T12] vhci_hcd vhci_hcd.6: release socket [ 1219.386719][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 1219.392767][ T12] vhci_hcd vhci_hcd.6: stop threads [ 1219.398041][ T12] vhci_hcd vhci_hcd.6: release socket [ 1219.403843][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 1219.409876][ T12] vhci_hcd vhci_hcd.6: stop threads [ 1219.415134][ T12] vhci_hcd vhci_hcd.6: release socket [ 1219.421068][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 1219.426948][ T12] vhci_hcd vhci_hcd.6: stop threads [ 1219.432488][ T12] vhci_hcd vhci_hcd.6: release socket [ 1219.444662][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 1219.475984][ T1509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.584696][ T1548] loop7: detected capacity change from 0 to 1024 [ 1219.601434][ T1548] EXT4-fs: inline encryption not supported [ 1219.607321][ T1548] EXT4-fs: Ignoring removed bh option [ 1219.629403][ T1548] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1219.659319][ T1548] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1219.678525][ T1548] EXT4-fs error (device loop7): ext4_quota_enable:7192: comm syz.7.8932: inode #2304: comm syz.7.8932: iget: illegal inode # [ 1219.717017][ T1548] loop7: lost filesystem error report for type 5 error -117 [ 1219.717207][ T1548] EXT4-fs (loop7): Remounting filesystem read-only [ 1219.724678][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1219.724707][ C0] EXT4-fs (loop7): initial error at time 1772960642: ext4_quota_enable:7192 [ 1219.724732][ C0] EXT4-fs (loop7): last error at time 1772960642: ext4_quota_enable:7192 [ 1219.815817][ T1548] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1219.847490][ T1548] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1219.978735][ T1548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1220.316474][ T1563] loop4: detected capacity change from 0 to 128 [ 1220.420508][ T1563] ext4: Unknown parameter 'dont_hash' [ 1220.602962][T30065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.884565][ T1590] FAULT_INJECTION: forcing a failure. [ 1221.884565][ T1590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.900154][ T1589] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1222.140108][ T1592] tipc: Enabling of bearer rejected, failed to enable media [ 1222.236125][ T1589] SELinux: failed to load policy [ 1222.244507][ T1590] CPU: 0 UID: 0 PID: 1590 Comm: syz.6.8942 Tainted: G W syzkaller #0 PREEMPT(full) [ 1222.244609][ T1590] Tainted: [W]=WARN [ 1222.244617][ T1590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1222.244628][ T1590] Call Trace: [ 1222.244635][ T1590] [ 1222.244649][ T1590] __dump_stack+0x1d/0x30 [ 1222.244679][ T1590] dump_stack_lvl+0x95/0xd0 [ 1222.244707][ T1590] dump_stack+0x15/0x1b [ 1222.244755][ T1590] should_fail_ex+0x263/0x280 [ 1222.244777][ T1590] should_fail+0xb/0x20 [ 1222.244877][ T1590] should_fail_usercopy+0x1a/0x20 [ 1222.244899][ T1590] _copy_from_user+0x1c/0xb0 [ 1222.244923][ T1590] __sys_bpf+0x183/0x7e0 [ 1222.244988][ T1590] __x64_sys_bpf+0x41/0x50 [ 1222.245025][ T1590] x64_sys_call+0x10cb/0x3020 [ 1222.245096][ T1590] do_syscall_64+0x12c/0x370 [ 1222.245118][ T1590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.245191][ T1590] RIP: 0033:0x7fb8c6cac799 [ 1222.245208][ T1590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.245249][ T1590] RSP: 002b:00007fb8c56ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1222.245271][ T1590] RAX: ffffffffffffffda RBX: 00007fb8c6f25fa0 RCX: 00007fb8c6cac799 [ 1222.245288][ T1590] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 1222.245303][ T1590] RBP: 00007fb8c56ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.245315][ T1590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.245390][ T1590] R13: 00007fb8c6f26038 R14: 00007fb8c6f25fa0 R15: 00007ffcf3fb0988 [ 1222.245432][ T1590] [ 1222.507775][ T1597] serio: Serial port ttyS3 [ 1223.088847][ T1626] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8952'. [ 1223.109488][ T1628] syzkaller0: entered promiscuous mode [ 1223.126017][ T1628] syzkaller0: entered allmulticast mode [ 1223.474228][ T1631] loop4: detected capacity change from 0 to 2048 [ 1223.526956][ T28] audit: type=1400 audit(1772960646.169:19916): avc: denied { getopt } for pid=1638 comm="syz.7.8959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1223.547960][ T1639] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1639 comm=syz.7.8959 [ 1223.562170][T29606] loop4: p1 p2 [ 1223.568820][ T28] audit: type=1400 audit(1772960646.219:19917): avc: denied { nlmsg_write } for pid=1638 comm="syz.7.8959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1223.629358][ T1631] loop4: p1 p2 [ 1223.631538][ T1642] bridge1: entered allmulticast mode [ 1224.109170][ T1655] loop7: detected capacity change from 0 to 2048 [ 1224.203615][ T1658] tipc: Enabling of bearer rejected, failed to enable media [ 1224.336789][T29605] loop7: p1 p2 [ 1224.587694][ T3414] usb 13-1: enqueue for inactive port 0 [ 1224.593497][ T3414] usb 13-1: enqueue for inactive port 0 [ 1224.598483][ T1655] loop7: p1 p2 [ 1224.669180][ T3414] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1224.920687][ T1670] FAULT_INJECTION: forcing a failure. [ 1224.920687][ T1670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.998555][ T1670] CPU: 0 UID: 0 PID: 1670 Comm: syz.2.8969 Tainted: G W syzkaller #0 PREEMPT(full) [ 1224.998668][ T1670] Tainted: [W]=WARN [ 1224.998676][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1224.998689][ T1670] Call Trace: [ 1224.998697][ T1670] [ 1224.998706][ T1670] __dump_stack+0x1d/0x30 [ 1224.998735][ T1670] dump_stack_lvl+0x95/0xd0 [ 1224.998785][ T1670] dump_stack+0x15/0x1b [ 1224.998811][ T1670] should_fail_ex+0x263/0x280 [ 1224.998838][ T1670] should_fail+0xb/0x20 [ 1224.998931][ T1670] should_fail_usercopy+0x1a/0x20 [ 1224.998958][ T1670] _copy_to_user+0x20/0xa0 [ 1224.999009][ T1670] simple_read_from_buffer+0xb5/0x130 [ 1224.999033][ T1670] proc_fail_nth_read+0x10e/0x150 [ 1224.999133][ T1670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1224.999165][ T1670] vfs_read+0x1ab/0x7f0 [ 1224.999218][ T1670] ? inet_dgram_connect+0x125/0x1c0 [ 1224.999313][ T1670] ? __rcu_read_unlock+0x4e/0x70 [ 1224.999338][ T1670] ? __fget_files+0x184/0x1c0 [ 1224.999380][ T1670] ? mutex_lock+0x57/0x90 [ 1224.999407][ T1670] ksys_read+0xdc/0x1a0 [ 1224.999450][ T1670] __x64_sys_read+0x40/0x50 [ 1224.999608][ T1670] x64_sys_call+0x2886/0x3020 [ 1224.999640][ T1670] do_syscall_64+0x12c/0x370 [ 1224.999661][ T1670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.999686][ T1670] RIP: 0033:0x7f5dfbd6cfce [ 1224.999728][ T1670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1224.999750][ T1670] RSP: 002b:00007f5dfa7fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1224.999774][ T1670] RAX: ffffffffffffffda RBX: 00007f5dfa7ff6c0 RCX: 00007f5dfbd6cfce [ 1224.999860][ T1670] RDX: 000000000000000f RSI: 00007f5dfa7ff0a0 RDI: 0000000000000004 [ 1224.999876][ T1670] RBP: 00007f5dfa7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.999944][ T1670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.999958][ T1670] R13: 00007f5dfc026038 R14: 00007f5dfc025fa0 R15: 00007ffde66d1c78 [ 1224.999980][ T1670] [ 1225.261927][ T1674] FAULT_INJECTION: forcing a failure. [ 1225.261927][ T1674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1225.276003][ T1674] CPU: 1 UID: 0 PID: 1674 Comm: syz.2.8971 Tainted: G W syzkaller #0 PREEMPT(full) [ 1225.276058][ T1674] Tainted: [W]=WARN [ 1225.276064][ T1674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1225.276076][ T1674] Call Trace: [ 1225.276083][ T1674] [ 1225.276090][ T1674] __dump_stack+0x1d/0x30 [ 1225.276121][ T1674] dump_stack_lvl+0x95/0xd0 [ 1225.276148][ T1674] dump_stack+0x15/0x1b [ 1225.276225][ T1674] should_fail_ex+0x263/0x280 [ 1225.276322][ T1674] should_fail+0xb/0x20 [ 1225.276342][ T1674] should_fail_usercopy+0x1a/0x20 [ 1225.276369][ T1674] _copy_from_user+0x1c/0xb0 [ 1225.276402][ T1674] __copy_msghdr+0x244/0x300 [ 1225.276453][ T1674] ___sys_sendmsg+0x10c/0x1e0 [ 1225.276477][ T1674] ? path_openat+0x1b01/0x2050 [ 1225.276628][ T1674] __sys_sendmmsg+0x185/0x320 [ 1225.276663][ T1674] __x64_sys_sendmmsg+0x57/0x70 [ 1225.276729][ T1674] x64_sys_call+0x27aa/0x3020 [ 1225.276757][ T1674] do_syscall_64+0x12c/0x370 [ 1225.276823][ T1674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.276849][ T1674] RIP: 0033:0x7f5dfbdac799 [ 1225.276866][ T1674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.276888][ T1674] RSP: 002b:00007f5dfa7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1225.276912][ T1674] RAX: ffffffffffffffda RBX: 00007f5dfc025fa0 RCX: 00007f5dfbdac799 [ 1225.276929][ T1674] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 1225.276992][ T1674] RBP: 00007f5dfa7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.277004][ T1674] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.277024][ T1674] R13: 00007f5dfc026038 R14: 00007f5dfc025fa0 R15: 00007ffde66d1c78 [ 1225.277044][ T1674] [ 1225.576174][ T1689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1225.584963][ T28] audit: type=1400 audit(1772960648.229:19918): avc: denied { read } for pid=1680 comm="syz.4.8974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1225.933573][ T28] audit: type=1400 audit(1772960648.579:19919): avc: denied { getopt } for pid=1707 comm="syz.6.8983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1226.075155][ T1710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8984'. [ 1226.380574][ T28] audit: type=1326 audit(1772960649.029:19920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.2.8987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfbdac799 code=0x7ffc0000 [ 1226.489075][ T28] audit: type=1326 audit(1772960649.029:19921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.2.8987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfbdac799 code=0x7ffc0000 [ 1226.663033][ T1728] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8991'. [ 1226.675319][ T1731] FAULT_INJECTION: forcing a failure. [ 1226.675319][ T1731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.714778][ T28] audit: type=1326 audit(1772960649.059:19922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.2.8987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dfbdac799 code=0x7ffc0000 [ 1226.750906][ T1731] CPU: 1 UID: 0 PID: 1731 Comm: syz.2.8992 Tainted: G W syzkaller #0 PREEMPT(full) [ 1226.750939][ T1731] Tainted: [W]=WARN [ 1226.750945][ T1731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1226.750957][ T1731] Call Trace: [ 1226.750965][ T1731] [ 1226.751051][ T1731] __dump_stack+0x1d/0x30 [ 1226.751082][ T1731] dump_stack_lvl+0x95/0xd0 [ 1226.751103][ T1731] dump_stack+0x15/0x1b [ 1226.751145][ T1731] should_fail_ex+0x263/0x280 [ 1226.751172][ T1731] should_fail+0xb/0x20 [ 1226.751195][ T1731] should_fail_usercopy+0x1a/0x20 [ 1226.751224][ T1731] _copy_from_user+0x1c/0xb0 [ 1226.751277][ T1731] smc_setsockopt+0x2ac/0x750 [ 1226.751301][ T1731] ? __pfx_smc_setsockopt+0x10/0x10 [ 1226.751370][ T1731] __sys_setsockopt+0x184/0x200 [ 1226.751402][ T1731] __x64_sys_setsockopt+0x64/0x80 [ 1226.751427][ T1731] x64_sys_call+0x2327/0x3020 [ 1226.751524][ T1731] do_syscall_64+0x12c/0x370 [ 1226.751620][ T1731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.751645][ T1731] RIP: 0033:0x7f5dfbdac799 [ 1226.751660][ T1731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.751677][ T1731] RSP: 002b:00007f5dfa7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1226.751697][ T1731] RAX: ffffffffffffffda RBX: 00007f5dfc025fa0 RCX: 00007f5dfbdac799 [ 1226.751715][ T1731] RDX: 000000000000048f RSI: 0000000000000000 RDI: 0000000000000003 [ 1226.751730][ T1731] RBP: 00007f5dfa7ff090 R08: 000000000000002c R09: 0000000000000000 [ 1226.751745][ T1731] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.751766][ T1731] R13: 00007f5dfc026038 R14: 00007f5dfc025fa0 R15: 00007ffde66d1c78 [ 1226.751788][ T1731] [ 1226.953440][ T28] audit: type=1326 audit(1772960649.059:19923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.2.8987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfbdac799 code=0x7ffc0000 [ 1226.988552][ T28] audit: type=1326 audit(1772960649.059:19924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.2.8987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfbdac799 code=0x7ffc0000 [ 1227.013534][ T28] audit: type=1326 audit(1772960649.059:19925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.2.8987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dfbd6cfce code=0x7ffc0000 [ 1227.200214][ T1741] tmpfs: Bad value for 'mpol' [ 1227.269346][ T1749] netlink: 'syz.7.8997': attribute type 13 has an invalid length. [ 1227.324050][ T1751] loop8: detected capacity change from 0 to 2048 [ 1227.335604][ T1753] FAULT_INJECTION: forcing a failure. [ 1227.335604][ T1753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.408705][ T1753] CPU: 1 UID: 0 PID: 1753 Comm: syz.2.8998 Tainted: G W syzkaller #0 PREEMPT(full) [ 1227.408777][ T1753] Tainted: [W]=WARN [ 1227.408784][ T1753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1227.408796][ T1753] Call Trace: [ 1227.408804][ T1753] [ 1227.408813][ T1753] __dump_stack+0x1d/0x30 [ 1227.408845][ T1753] dump_stack_lvl+0x95/0xd0 [ 1227.408873][ T1753] dump_stack+0x15/0x1b [ 1227.408922][ T1753] should_fail_ex+0x263/0x280 [ 1227.408944][ T1753] should_fail+0xb/0x20 [ 1227.408982][ T1753] should_fail_usercopy+0x1a/0x20 [ 1227.409082][ T1753] _copy_from_user+0x1c/0xb0 [ 1227.409114][ T1753] ___sys_sendmsg+0xc1/0x1e0 [ 1227.409148][ T1753] __x64_sys_sendmsg+0xd4/0x160 [ 1227.409190][ T1753] x64_sys_call+0x194c/0x3020 [ 1227.409251][ T1753] do_syscall_64+0x12c/0x370 [ 1227.409275][ T1753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.409387][ T1753] RIP: 0033:0x7f5dfbdac799 [ 1227.409407][ T1753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.409426][ T1753] RSP: 002b:00007f5dfa7ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.409446][ T1753] RAX: ffffffffffffffda RBX: 00007f5dfc025fa0 RCX: 00007f5dfbdac799 [ 1227.409462][ T1753] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 000000000000000b [ 1227.409516][ T1753] RBP: 00007f5dfa7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.409532][ T1753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.409545][ T1753] R13: 00007f5dfc026038 R14: 00007f5dfc025fa0 R15: 00007ffde66d1c78 [ 1227.409562][ T1753] [ 1227.676066][T29605] loop8: p1 p2 [ 1227.696750][ T1751] loop_reread_partitions: partition scan of loop8 () failed (rc=-16) [ 1227.869034][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.878060][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.894902][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.919442][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.593106][ T1784] bond2: option mode: invalid value (9) [ 1228.600804][ T1784] bond2 (unregistering): Released all slaves [ 1228.603691][ T1787] xt_TCPMSS: Only works on TCP SYN packets [ 1228.820000][ T1796] loop6: detected capacity change from 0 to 1024 [ 1228.912235][ T1796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.225431][ T1796] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: comm syz.6.9011: inode #1701604449: comm syz.6.9011: iget: illegal inode # [ 1229.256393][ T1796] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.9011: error while reading EA inode 1701604449 err=-117 [ 1229.362937][T28382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.382996][ T1829] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9019'. [ 1229.444347][ T1830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1106 sclass=netlink_route_socket pid=1830 comm=syz.8.9016 [ 1229.908552][ T1848] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1230.217382][ T1852] Invalid argument reading file caps for ./file0 [ 1230.276399][ T1854] xt_hashlimit: max too large, truncated to 1048576 [ 1230.411062][ T1862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9032'. [ 1230.423048][ T1862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9032'. [ 1230.430889][ T1863] netlink: 'syz.8.9030': attribute type 6 has an invalid length. [ 1230.441681][ T1856] loop4: detected capacity change from 0 to 512 [ 1230.476977][ T1856] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1230.485270][ T1862] loop7: detected capacity change from 0 to 512 [ 1230.575015][ T1872] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9030'. [ 1230.584756][ T1856] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.9029: iget: bad i_size value: 12154757448730 [ 1230.602317][ T1872] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9030'. [ 1230.615162][ T1856] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1230.618417][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1230.634110][ C1] EXT4-fs (loop4): initial error at time 1772960653: ext4_orphan_get:1391: inode 13 [ 1230.643539][ C1] EXT4-fs (loop4): last error at time 1772960653: ext4_orphan_get:1391: inode 13 [ 1230.810370][ T1856] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.9029: couldn't read orphan inode 13 (err -117) [ 1230.855067][ T1862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.917804][ T1856] loop4: lost filesystem error report for type 5 error -117 [ 1230.921017][ T1856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.957827][ T1862] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1231.141164][ T1856] FAULT_INJECTION: forcing a failure. [ 1231.141164][ T1856] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.389404][ T1862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.439735][ T1856] CPU: 1 UID: 0 PID: 1856 Comm: syz.4.9029 Tainted: G W syzkaller #0 PREEMPT(full) [ 1231.439797][ T1856] Tainted: [W]=WARN [ 1231.439805][ T1856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1231.439820][ T1856] Call Trace: [ 1231.439830][ T1856] [ 1231.439840][ T1856] __dump_stack+0x1d/0x30 [ 1231.439868][ T1856] dump_stack_lvl+0x95/0xd0 [ 1231.439905][ T1856] dump_stack+0x15/0x1b [ 1231.439930][ T1856] should_fail_ex+0x263/0x280 [ 1231.439957][ T1856] should_failslab+0x8c/0xb0 [ 1231.440011][ T1856] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 1231.440036][ T1856] ? __d_alloc+0x37/0x340 [ 1231.440063][ T1856] ? avc_policy_seqno+0x15/0x30 [ 1231.440087][ T1856] __d_alloc+0x37/0x340 [ 1231.440156][ T1856] d_alloc_parallel+0x54/0xce0 [ 1231.440181][ T1856] ? __rcu_read_unlock+0x4e/0x70 [ 1231.440201][ T1856] ? __d_lookup+0x316/0x340 [ 1231.440238][ T1856] path_openat+0x8b9/0x2050 [ 1231.440336][ T1856] do_file_open+0x16c/0x290 [ 1231.440382][ T1856] do_sys_openat2+0x94/0x130 [ 1231.440410][ T1856] __x64_sys_creat+0x65/0x90 [ 1231.440460][ T1856] x64_sys_call+0x2ea0/0x3020 [ 1231.440566][ T1856] do_syscall_64+0x12c/0x370 [ 1231.440609][ T1856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.440631][ T1856] RIP: 0033:0x7fd98deac799 [ 1231.440651][ T1856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.440700][ T1856] RSP: 002b:00007fd98c907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1231.440722][ T1856] RAX: ffffffffffffffda RBX: 00007fd98e125fa0 RCX: 00007fd98deac799 [ 1231.440736][ T1856] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 00002000000001c0 [ 1231.440751][ T1856] RBP: 00007fd98c907090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.440768][ T1856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.440817][ T1856] R13: 00007fd98e126038 R14: 00007fd98e125fa0 R15: 00007fffe3ad9c08 [ 1231.440838][ T1856] [ 1231.708337][ T1883] syzkaller0: entered promiscuous mode [ 1231.728482][ T1883] syzkaller0: entered allmulticast mode [ 1231.855099][ T1878] loop6: detected capacity change from 0 to 256 [ 1231.866333][T29089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.878099][ T28] kauditd_printk_skb: 574 callbacks suppressed [ 1231.878114][ T28] audit: type=1326 audit(1772960654.499:20500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1231.932440][ T1878] FAT-fs (loop6): Directory bread(block 64) failed [ 1231.960968][ T1878] FAT-fs (loop6): Directory bread(block 65) failed [ 1231.975688][ T1878] FAT-fs (loop6): Directory bread(block 66) failed [ 1231.996533][ T28] audit: type=1326 audit(1772960654.499:20501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.026351][ T1878] FAT-fs (loop6): Directory bread(block 67) failed [ 1232.043403][ T1878] FAT-fs (loop6): Directory bread(block 68) failed [ 1232.094169][ T1878] FAT-fs (loop6): Directory bread(block 69) failed [ 1232.115341][ T1878] FAT-fs (loop6): Directory bread(block 70) failed [ 1232.122288][ T28] audit: type=1326 audit(1772960654.499:20502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.148532][ T1887] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1232.165226][ T1878] FAT-fs (loop6): Directory bread(block 71) failed [ 1232.185040][ T1887] loop8: detected capacity change from 0 to 512 [ 1232.191478][ T1878] FAT-fs (loop6): Directory bread(block 72) failed [ 1232.207483][ T1878] FAT-fs (loop6): Directory bread(block 73) failed [ 1232.225659][ T28] audit: type=1326 audit(1772960654.499:20503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.249264][ T28] audit: type=1326 audit(1772960654.499:20504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.275883][ T1887] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1232.289018][ T28] audit: type=1326 audit(1772960654.499:20505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.321686][ T1878] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9033'. [ 1232.338248][ T1894] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9038'. [ 1232.375699][ T28] audit: type=1326 audit(1772960654.499:20506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.399916][ T28] audit: type=1326 audit(1772960654.499:20507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.423808][ T28] audit: type=1326 audit(1772960654.499:20508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.447690][ T28] audit: type=1326 audit(1772960654.499:20509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1876 comm="syz.6.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1232.471577][ T1878] random: crng reseeded on system resumption [ 1233.670761][ T1917] loop7: detected capacity change from 0 to 2048 [ 1233.805085][ T1912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9040'. [ 1233.815380][ T1912] FAULT_INJECTION: forcing a failure. [ 1233.815380][ T1912] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.828136][ T1912] CPU: 0 UID: 0 PID: 1912 Comm: syz.2.9040 Tainted: G W syzkaller #0 PREEMPT(full) [ 1233.828259][ T1912] Tainted: [W]=WARN [ 1233.828267][ T1912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1233.828282][ T1912] Call Trace: [ 1233.828291][ T1912] [ 1233.828301][ T1912] __dump_stack+0x1d/0x30 [ 1233.828333][ T1912] dump_stack_lvl+0x95/0xd0 [ 1233.828358][ T1912] dump_stack+0x15/0x1b [ 1233.828403][ T1912] should_fail_ex+0x263/0x280 [ 1233.828431][ T1912] should_failslab+0x8c/0xb0 [ 1233.828457][ T1912] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1233.828490][ T1912] ? __alloc_skb+0x2d6/0x690 [ 1233.828584][ T1912] __alloc_skb+0x2d6/0x690 [ 1233.828655][ T1912] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 1233.828682][ T1912] ? __alloc_skb+0x200/0x690 [ 1233.828708][ T1912] audit_log_start+0x3aa/0x730 [ 1233.828806][ T1912] ? kstrtouint_from_user+0xa8/0xf0 [ 1233.828828][ T1912] audit_seccomp+0x47/0x100 [ 1233.828883][ T1912] ? __seccomp_filter+0x8db/0x1350 [ 1233.828923][ T1912] __seccomp_filter+0x8ec/0x1350 [ 1233.829008][ T1912] ? __rcu_read_unlock+0x4e/0x70 [ 1233.829034][ T1912] ? __fget_files+0x184/0x1c0 [ 1233.829056][ T1912] ? mutex_lock+0x57/0x90 [ 1233.829091][ T1912] ? mutex_unlock+0x4e/0x90 [ 1233.829126][ T1912] __secure_computing+0x81/0x150 [ 1233.829188][ T1912] do_syscall_64+0xd3/0x370 [ 1233.829209][ T1912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.829230][ T1912] RIP: 0033:0x7f5dfbdac799 [ 1233.829248][ T1912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.829271][ T1912] RSP: 002b:00007f5dfa7bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1233.829329][ T1912] RAX: ffffffffffffffda RBX: 00007f5dfc026180 RCX: 00007f5dfbdac799 [ 1233.829345][ T1912] RDX: 0000000000103801 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1233.829361][ T1912] RBP: 00007f5dfa7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.829378][ T1912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.829456][ T1912] R13: 00007f5dfc026218 R14: 00007f5dfc026180 R15: 00007ffde66d1c78 [ 1233.829474][ T1912] [ 1234.042252][ T1912] random: crng reseeded on system resumption [ 1234.108963][ T1922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9043'. [ 1234.260723][ T1917] loop7: p1 p2 [ 1234.373413][ T1926] loop4: detected capacity change from 0 to 2048 [ 1234.646028][T29605] loop4: p1 p2 [ 1234.718533][ T1926] loop4: p1 p2 [ 1235.212480][ T1934] FAULT_INJECTION: forcing a failure. [ 1235.212480][ T1934] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.257460][ T1934] CPU: 1 UID: 0 PID: 1934 Comm: syz.2.9049 Tainted: G W syzkaller #0 PREEMPT(full) [ 1235.257526][ T1934] Tainted: [W]=WARN [ 1235.257559][ T1934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1235.257573][ T1934] Call Trace: [ 1235.257580][ T1934] [ 1235.257588][ T1934] __dump_stack+0x1d/0x30 [ 1235.257633][ T1934] dump_stack_lvl+0x95/0xd0 [ 1235.257659][ T1934] dump_stack+0x15/0x1b [ 1235.257680][ T1934] should_fail_ex+0x263/0x280 [ 1235.257703][ T1934] should_failslab+0x8c/0xb0 [ 1235.257797][ T1934] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1235.257821][ T1934] ? __alloc_skb+0x2d6/0x690 [ 1235.257972][ T1934] __alloc_skb+0x2d6/0x690 [ 1235.257997][ T1934] ? __alloc_skb+0x200/0x690 [ 1235.258105][ T1934] alloc_skb_with_frags+0x7d/0x470 [ 1235.258133][ T1934] ? css_rstat_updated+0xbb/0x280 [ 1235.258159][ T1934] sock_alloc_send_pskb+0x44d/0x500 [ 1235.258261][ T1934] unix_dgram_sendmsg+0x391/0x1060 [ 1235.258290][ T1934] ? selinux_socket_sendmsg+0x192/0x1c0 [ 1235.258322][ T1934] unix_seqpacket_sendmsg+0xd1/0x110 [ 1235.258345][ T1934] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1235.258410][ T1934] ____sys_sendmsg+0x563/0x5b0 [ 1235.258442][ T1934] ___sys_sendmsg+0x195/0x1e0 [ 1235.258477][ T1934] __sys_sendmmsg+0x185/0x320 [ 1235.258580][ T1934] __x64_sys_sendmmsg+0x57/0x70 [ 1235.258610][ T1934] x64_sys_call+0x27aa/0x3020 [ 1235.258636][ T1934] do_syscall_64+0x12c/0x370 [ 1235.258711][ T1934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.258736][ T1934] RIP: 0033:0x7f5dfbdac799 [ 1235.258754][ T1934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.258773][ T1934] RSP: 002b:00007f5dfa7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1235.258842][ T1934] RAX: ffffffffffffffda RBX: 00007f5dfc025fa0 RCX: 00007f5dfbdac799 [ 1235.258893][ T1934] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000004 [ 1235.258907][ T1934] RBP: 00007f5dfa7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.258920][ T1934] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 1235.258933][ T1934] R13: 00007f5dfc026038 R14: 00007f5dfc025fa0 R15: 00007ffde66d1c78 [ 1235.259011][ T1934] [ 1235.495556][ T7010] kernel write not supported for file /input/event0 (pid: 7010 comm: kworker/0:17) [ 1235.516623][ T1938] loop8: detected capacity change from 0 to 2048 [ 1235.552019][ T1938] loop8: p1 < > p3 [ 1235.580606][ T1938] loop8: p3 size 134217728 extends beyond EOD, truncated [ 1235.633441][ T1950] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1235.648242][ T3000] loop8: p1 < > p3 [ 1235.654430][ T3000] loop8: p3 size 134217728 extends beyond EOD, truncated [ 1235.662269][ T1950] loop6: detected capacity change from 0 to 512 [ 1235.676146][ T1950] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1235.723589][T29606] udevd[29606]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1235.737150][T29605] udevd[29605]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1236.044270][ T1969] loop7: detected capacity change from 0 to 256 [ 1236.129406][ T1969] FAT-fs (loop7): Directory bread(block 64) failed [ 1236.135990][ T1969] FAT-fs (loop7): Directory bread(block 65) failed [ 1236.142631][ T1969] FAT-fs (loop7): Directory bread(block 66) failed [ 1236.149256][ T1969] FAT-fs (loop7): Directory bread(block 67) failed [ 1236.155833][ T1969] FAT-fs (loop7): Directory bread(block 68) failed [ 1236.162377][ T1969] FAT-fs (loop7): Directory bread(block 69) failed [ 1236.168931][ T1969] FAT-fs (loop7): Directory bread(block 70) failed [ 1236.175548][ T1969] FAT-fs (loop7): Directory bread(block 71) failed [ 1236.182173][ T1969] FAT-fs (loop7): Directory bread(block 72) failed [ 1236.188753][ T1969] FAT-fs (loop7): Directory bread(block 73) failed [ 1236.200622][ T1969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1236.228028][ T1959] FAULT_INJECTION: forcing a failure. [ 1236.228028][ T1959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.315171][ T1959] CPU: 1 UID: 0 PID: 1959 Comm: syz.2.9057 Tainted: G W syzkaller #0 PREEMPT(full) [ 1236.315220][ T1959] Tainted: [W]=WARN [ 1236.315229][ T1959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1236.315244][ T1959] Call Trace: [ 1236.315253][ T1959] [ 1236.315262][ T1959] __dump_stack+0x1d/0x30 [ 1236.315297][ T1959] dump_stack_lvl+0x95/0xd0 [ 1236.315325][ T1959] dump_stack+0x15/0x1b [ 1236.315354][ T1959] should_fail_ex+0x263/0x280 [ 1236.315380][ T1959] should_fail+0xb/0x20 [ 1236.315404][ T1959] should_fail_usercopy+0x1a/0x20 [ 1236.315427][ T1959] _copy_to_user+0x20/0xa0 [ 1236.315503][ T1959] simple_read_from_buffer+0xb5/0x130 [ 1236.315528][ T1959] proc_fail_nth_read+0x10e/0x150 [ 1236.315698][ T1959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1236.315731][ T1959] vfs_read+0x1ab/0x7f0 [ 1236.315795][ T1959] ? __rcu_read_unlock+0x4e/0x70 [ 1236.315814][ T1959] ? __fget_files+0x184/0x1c0 [ 1236.315893][ T1959] ? tick_program_event+0x79/0xc0 [ 1236.315949][ T1959] ? mutex_lock+0x57/0x90 [ 1236.315977][ T1959] ksys_read+0xdc/0x1a0 [ 1236.316027][ T1959] __x64_sys_read+0x40/0x50 [ 1236.316047][ T1959] x64_sys_call+0x2886/0x3020 [ 1236.316072][ T1959] do_syscall_64+0x12c/0x370 [ 1236.316119][ T1959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.316144][ T1959] RIP: 0033:0x7f5dfbd6cfce [ 1236.316160][ T1959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1236.316210][ T1959] RSP: 002b:00007f5dfa7ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1236.316236][ T1959] RAX: ffffffffffffffda RBX: 00007f5dfa7de6c0 RCX: 00007f5dfbd6cfce [ 1236.316253][ T1959] RDX: 000000000000000f RSI: 00007f5dfa7de0a0 RDI: 000000000000000b [ 1236.316277][ T1959] RBP: 00007f5dfa7de090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.316292][ T1959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.316307][ T1959] R13: 00007f5dfc026128 R14: 00007f5dfc026090 R15: 00007ffde66d1c78 [ 1236.316329][ T1959] [ 1236.693318][ T1980] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 1236.760804][ T1983] netlink: 'syz.6.9064': attribute type 3 has an invalid length. [ 1236.791742][ T1985] FAULT_INJECTION: forcing a failure. [ 1236.791742][ T1985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.805427][ T1985] CPU: 1 UID: 0 PID: 1985 Comm: syz.4.9066 Tainted: G W syzkaller #0 PREEMPT(full) [ 1236.805462][ T1985] Tainted: [W]=WARN [ 1236.805470][ T1985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1236.805482][ T1985] Call Trace: [ 1236.805489][ T1985] [ 1236.805497][ T1985] __dump_stack+0x1d/0x30 [ 1236.805565][ T1985] dump_stack_lvl+0x95/0xd0 [ 1236.805589][ T1985] dump_stack+0x15/0x1b [ 1236.805610][ T1985] should_fail_ex+0x263/0x280 [ 1236.805635][ T1985] should_fail+0xb/0x20 [ 1236.805718][ T1985] should_fail_usercopy+0x1a/0x20 [ 1236.805777][ T1985] _copy_from_iter+0xcf/0xea0 [ 1236.805802][ T1985] ? alloc_pages_mpol+0x217/0x260 [ 1236.805832][ T1985] copy_page_from_iter+0x178/0x2a0 [ 1236.805972][ T1985] tun_get_user+0xbbd/0x27c0 [ 1236.805999][ T1985] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1236.806025][ T1985] tun_chr_write_iter+0x15e/0x210 [ 1236.806053][ T1985] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1236.806084][ T1985] vfs_write+0x5a6/0x9f0 [ 1236.806119][ T1985] ksys_write+0xdc/0x1a0 [ 1236.806139][ T1985] __x64_sys_write+0x40/0x50 [ 1236.806192][ T1985] x64_sys_call+0x27e1/0x3020 [ 1236.806302][ T1985] do_syscall_64+0x12c/0x370 [ 1236.806325][ T1985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.806347][ T1985] RIP: 0033:0x7fd98de6cfce [ 1236.806432][ T1985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1236.806525][ T1985] RSP: 002b:00007fd98c906fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1236.806546][ T1985] RAX: ffffffffffffffda RBX: 00007fd98c9076c0 RCX: 00007fd98de6cfce [ 1236.806561][ T1985] RDX: 0000000000000036 RSI: 0000200000000480 RDI: 00000000000000c8 [ 1236.806575][ T1985] RBP: 00007fd98c907090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.806668][ T1985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.806719][ T1985] R13: 00007fd98e126038 R14: 00007fd98e125fa0 R15: 00007fffe3ad9c08 [ 1236.806739][ T1985] [ 1237.013057][ T1983] netlink: 'syz.6.9064': attribute type 8 has an invalid length. [ 1237.021116][ T1983] netlink: 199720 bytes leftover after parsing attributes in process `syz.6.9064'. [ 1237.059261][ T1988] loop4: detected capacity change from 0 to 512 [ 1237.104071][ T28] kauditd_printk_skb: 266 callbacks suppressed [ 1237.104089][ T28] audit: type=1400 audit(1772960659.749:20774): avc: denied { associate } for pid=1979 comm="syz.6.9064" name="cgroup.procs" dev="cgroup" ino=347 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 1237.238723][ T1988] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 1237.258776][ T1988] EXT4-fs (loop4): mount failed [ 1237.327390][ T2000] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1237.360003][ T2000] loop8: detected capacity change from 0 to 512 [ 1237.380244][ T2000] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1237.708337][ T1988] netlink: 'syz.4.9067': attribute type 10 has an invalid length. [ 1237.726579][ T1988] team0: Port device vlan0 added [ 1237.779063][ T2012] FAULT_INJECTION: forcing a failure. [ 1237.779063][ T2012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.792373][ T2012] CPU: 0 UID: 0 PID: 2012 Comm: syz.2.9074 Tainted: G W syzkaller #0 PREEMPT(full) [ 1237.792406][ T2012] Tainted: [W]=WARN [ 1237.792414][ T2012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1237.792483][ T2012] Call Trace: [ 1237.792489][ T2012] [ 1237.792496][ T2012] __dump_stack+0x1d/0x30 [ 1237.792523][ T2012] dump_stack_lvl+0x95/0xd0 [ 1237.792550][ T2012] dump_stack+0x15/0x1b [ 1237.792630][ T2012] should_fail_ex+0x263/0x280 [ 1237.792652][ T2012] should_fail+0xb/0x20 [ 1237.792673][ T2012] should_fail_usercopy+0x1a/0x20 [ 1237.792719][ T2012] strncpy_from_user+0x27/0x250 [ 1237.792755][ T2012] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 1237.792813][ T2012] do_getname+0x59/0x1c0 [ 1237.792836][ T2012] user_path_at+0x28/0x100 [ 1237.792878][ T2012] __x64_sys_pivot_root+0x9f/0x110 [ 1237.792904][ T2012] x64_sys_call+0x20a/0x3020 [ 1237.792935][ T2012] do_syscall_64+0x12c/0x370 [ 1237.793005][ T2012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.793028][ T2012] RIP: 0033:0x7f5dfbdac799 [ 1237.793048][ T2012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.793144][ T2012] RSP: 002b:00007f5dfa7ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1237.793166][ T2012] RAX: ffffffffffffffda RBX: 00007f5dfc025fa0 RCX: 00007f5dfbdac799 [ 1237.793190][ T2012] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 1237.793247][ T2012] RBP: 00007f5dfa7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.793260][ T2012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.793272][ T2012] R13: 00007f5dfc026038 R14: 00007f5dfc025fa0 R15: 00007ffde66d1c78 [ 1237.793291][ T2012] [ 1238.004366][ T2017] loop4: detected capacity change from 0 to 1024 [ 1238.029740][ T2019] loop7: detected capacity change from 0 to 128 [ 1238.144786][ T2017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1238.236393][T29089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.275738][ T2034] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1238.282719][ T2034] loop8: detected capacity change from 0 to 512 [ 1238.307962][ T2034] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1238.386918][ T2041] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9084'. [ 1238.499878][ T2052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1238.542857][ T2052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1238.689513][T29605] loop6: p1 p2 [ 1238.710563][ T2058] loop6: p1 p2 [ 1238.768183][ T2061] set_capacity_and_notify: 2 callbacks suppressed [ 1238.768203][ T2061] loop7: detected capacity change from 0 to 256 [ 1238.823065][ T2064] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9092'. [ 1238.863123][ T2061] FAT-fs (loop7): Directory bread(block 64) failed [ 1238.869766][ T2061] FAT-fs (loop7): Directory bread(block 65) failed [ 1238.876388][ T2061] FAT-fs (loop7): Directory bread(block 66) failed [ 1238.882939][ T2061] FAT-fs (loop7): Directory bread(block 67) failed [ 1238.889513][ T2061] FAT-fs (loop7): Directory bread(block 68) failed [ 1238.896084][ T2061] FAT-fs (loop7): Directory bread(block 69) failed [ 1238.902848][ T2061] FAT-fs (loop7): Directory bread(block 70) failed [ 1238.909525][ T2061] FAT-fs (loop7): Directory bread(block 71) failed [ 1238.916054][ T2061] FAT-fs (loop7): Directory bread(block 72) failed [ 1238.923129][ T2061] FAT-fs (loop7): Directory bread(block 73) failed [ 1238.935270][ T2061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1239.239873][ T2068] netlink: 'syz.2.9093': attribute type 1 has an invalid length. [ 1239.273858][ T2068] netlink: 'syz.2.9093': attribute type 1 has an invalid length. [ 1239.306385][ T2068] netlink: 'syz.2.9093': attribute type 1 has an invalid length. [ 1239.337538][ T2068] netlink: 'syz.2.9093': attribute type 1 has an invalid length. [ 1239.362042][ T2068] netlink: 'syz.2.9093': attribute type 1 has an invalid length. [ 1239.389887][ T2068] netlink: 'syz.2.9093': attribute type 1 has an invalid length. [ 1239.413914][ T2068] netlink: 'syz.2.9093': attribute type 1 has an invalid length. [ 1239.796664][ T2073] serio: Serial port ttyS3 [ 1240.327788][ T2079] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1240.355940][ T2079] loop7: detected capacity change from 0 to 512 [ 1240.369308][ T2079] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1240.642110][ T2092] loop4: detected capacity change from 0 to 128 [ 1240.693685][ T2102] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.9103' sets config #8 [ 1240.910754][ T2105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9101'. [ 1240.921002][ T2105] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9101'. [ 1240.968409][ T2105] geneve2: entered promiscuous mode [ 1240.974028][ T2105] geneve2: entered allmulticast mode [ 1241.647765][ T2114] loop7: detected capacity change from 0 to 256 [ 1241.664396][ T2114] FAT-fs (loop7): Directory bread(block 64) failed [ 1241.670990][ T2114] FAT-fs (loop7): Directory bread(block 65) failed [ 1241.677510][ T2114] FAT-fs (loop7): Directory bread(block 66) failed [ 1241.684114][ T2114] FAT-fs (loop7): Directory bread(block 67) failed [ 1241.690828][ T2114] FAT-fs (loop7): Directory bread(block 68) failed [ 1241.697346][ T2114] FAT-fs (loop7): Directory bread(block 69) failed [ 1241.703917][ T2114] FAT-fs (loop7): Directory bread(block 70) failed [ 1241.710445][ T2114] FAT-fs (loop7): Directory bread(block 71) failed [ 1241.717010][ T2114] FAT-fs (loop7): Directory bread(block 72) failed [ 1241.723544][ T2114] FAT-fs (loop7): Directory bread(block 73) failed [ 1241.740443][ T2114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1242.393567][ T2122] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1242.532379][ T28] audit: type=1400 audit(1772960665.179:20775): avc: denied { listen } for pid=2123 comm="syz.8.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1242.606260][ T2142] loop6: detected capacity change from 0 to 256 [ 1242.735198][ T2142] FAT-fs (loop6): Directory bread(block 64) failed [ 1242.752024][ T2142] FAT-fs (loop6): Directory bread(block 65) failed [ 1242.821873][ T2142] FAT-fs (loop6): Directory bread(block 66) failed [ 1242.850143][ T2142] FAT-fs (loop6): Directory bread(block 67) failed [ 1242.891053][ T2142] FAT-fs (loop6): Directory bread(block 68) failed [ 1242.920604][ T2142] FAT-fs (loop6): Directory bread(block 69) failed [ 1242.927171][ T2142] FAT-fs (loop6): Directory bread(block 70) failed [ 1242.941135][ T2147] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9119'. [ 1242.998333][ T2142] FAT-fs (loop6): Directory bread(block 71) failed [ 1243.016939][ T2142] FAT-fs (loop6): Directory bread(block 72) failed [ 1243.047096][ T2142] FAT-fs (loop6): Directory bread(block 73) failed [ 1243.048352][ T2150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9120'. [ 1243.291262][ T2154] syz.6.9118: attempt to access beyond end of device [ 1243.291262][ T2154] loop6: rw=2049, sector=1192, nr_sectors = 128 limit=256 [ 1243.542554][ T2159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1243.689471][ T96] kworker/u8:5: attempt to access beyond end of device [ 1243.689471][ T96] loop6: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 1243.723761][ T96] kworker/u8:5: attempt to access beyond end of device [ 1243.723761][ T96] loop6: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 1243.772933][ T96] kworker/u8:5: attempt to access beyond end of device [ 1243.772933][ T96] loop6: rw=1, sector=1960, nr_sectors = 4096 limit=256 [ 1243.829179][ T96] kworker/u8:5: attempt to access beyond end of device [ 1243.829179][ T96] loop6: rw=1, sector=6056, nr_sectors = 4024 limit=256 [ 1243.884684][ T96] kworker/u8:5: attempt to access beyond end of device [ 1243.884684][ T96] loop6: rw=1, sector=10080, nr_sectors = 4096 limit=256 [ 1243.958739][ T96] kworker/u8:5: attempt to access beyond end of device [ 1243.958739][ T96] loop6: rw=1, sector=14176, nr_sectors = 8192 limit=256 [ 1244.014701][ T96] kworker/u8:5: attempt to access beyond end of device [ 1244.014701][ T96] loop6: rw=1, sector=22368, nr_sectors = 3584 limit=256 [ 1244.089310][ T28] audit: type=1400 audit(1772960666.739:20776): avc: denied { read open } for pid=2162 comm="syz.2.9123" path="/" dev="configfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1244.129387][ T2165] IPVS: set_ctl: invalid protocol: 0 37.0.0.0:65535 [ 1244.224654][ T28] audit: type=1400 audit(1772960666.869:20777): avc: denied { listen } for pid=2169 comm="syz.2.9125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1244.255606][ T2173] validate_nla: 45 callbacks suppressed [ 1244.255623][ T2173] netlink: 'syz.6.9126': attribute type 10 has an invalid length. [ 1244.287368][ T28] audit: type=1400 audit(1772960666.879:20778): avc: denied { accept } for pid=2169 comm="syz.2.9125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1244.351896][ T2177] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1244.365383][ T2179] netlink: 276 bytes leftover after parsing attributes in process `syz.2.9128'. [ 1244.386950][ T2177] loop6: detected capacity change from 0 to 512 [ 1244.393876][ T2177] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1244.427403][ T2180] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=769 sclass=netlink_xfrm_socket pid=2180 comm=syz.2.9128 [ 1244.446407][ T28] audit: type=1400 audit(1772960667.069:20779): avc: denied { bind } for pid=2178 comm="syz.2.9128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1244.473264][ T28] audit: type=1400 audit(1772960667.069:20780): avc: denied { setopt } for pid=2178 comm="syz.2.9128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1245.316382][ T2186] loop4: detected capacity change from 0 to 512 [ 1245.356312][ T2186] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.9131: iget: bad extra_isize 90 (inode size 256) [ 1245.369887][ T2186] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1245.375254][ T2186] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9131: error while reading EA inode 11 err=-117 [ 1245.384605][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1245.384644][ C1] EXT4-fs (loop4): initial error at time 1772960668: ext4_xattr_inode_iget:441: inode 11 [ 1245.384675][ C1] EXT4-fs (loop4): last error at time 1772960668: ext4_xattr_inode_iget:441: inode 11 [ 1245.423090][ T2186] loop4: lost filesystem error report for type 5 error -117 [ 1245.428665][ T2186] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.9131: iget: bad extra_isize 90 (inode size 256) [ 1245.449353][ T2186] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1245.449677][ T2186] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9131: error while reading EA inode 11 err=-117 [ 1245.471332][ T2186] loop4: lost filesystem error report for type 5 error -117 [ 1245.471575][ T2186] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.9131: iget: bad extra_isize 90 (inode size 256) [ 1245.492513][ T2186] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1245.499139][ T2186] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9131: error while reading EA inode 18 err=-117 [ 1245.528853][ T2186] loop4: lost filesystem error report for type 5 error -117 [ 1245.529095][ T2186] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.9131: iget: bad extra_isize 90 (inode size 256) [ 1245.568741][ T2186] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1245.568942][ T2186] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9131: error while reading EA inode 18 err=-117 [ 1245.598536][ T2186] loop4: lost filesystem error report for type 5 error -117 [ 1245.598788][ T2186] EXT4-fs (loop4): 1 orphan inode deleted [ 1245.628926][ T2186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.717272][T29089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.112248][ T2204] 9p: Bad value for 'rfdno' [ 1246.144946][ T28] audit: type=1400 audit(1772960668.789:20781): avc: denied { map } for pid=2205 comm="syz.2.9138" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1246.162909][ T2200] loop4: detected capacity change from 0 to 8192 [ 1246.174109][ T28] audit: type=1400 audit(1772960668.809:20782): avc: denied { setattr } for pid=2205 comm="syz.2.9138" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1246.198410][ T2207] ªªªªªª: renamed from vlan0 (while UP) [ 1246.210378][ T28] audit: type=1400 audit(1772960668.809:20783): avc: denied { create } for pid=2205 comm="syz.2.9138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 1246.260430][T29605] loop4: p1 < > p2 p4 < p5 > [ 1246.265191][T29605] loop4: partition table partially beyond EOD, truncated [ 1246.294348][T29605] loop4: p1 start 134217728 is beyond EOD, truncated [ 1246.301481][T29605] loop4: p2 size 591360 extends beyond EOD, truncated [ 1246.310612][T29605] loop4: p5 size 591360 extends beyond EOD, truncated [ 1246.326695][ T2213] syzkaller0: entered promiscuous mode [ 1246.340214][ T2200] loop4: p1 < > p2 p4 < p5 > [ 1246.342472][ T2213] syzkaller0: entered allmulticast mode [ 1246.344974][ T2200] loop4: partition table partially beyond EOD, truncated [ 1246.358102][ T2200] loop4: p1 start 134217728 is beyond EOD, truncated [ 1246.366504][ T2200] loop4: p2 size 591360 extends beyond EOD, truncated [ 1246.376425][ T2200] loop4: p5 size 591360 extends beyond EOD, truncated [ 1246.420089][ T2215] loop8: detected capacity change from 0 to 1024 [ 1246.439461][ T2215] EXT4-fs: inline encryption not supported [ 1246.445334][ T2215] EXT4-fs: Ignoring removed bh option [ 1246.581539][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1246.581587][T29604] udevd[29604]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1246.592573][T29605] udevd[29605]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1246.617052][ T2215] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1247.242309][ T2215] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1247.390744][ T2215] EXT4-fs error (device loop8): ext4_quota_enable:7192: comm syz.8.9140: inode #2304: comm syz.8.9140: iget: illegal inode # [ 1247.409099][ T2230] loop4: detected capacity change from 0 to 1024 [ 1247.415788][ T2230] EXT4-fs: inline encryption not supported [ 1247.548656][ T2230] EXT4-fs: Ignoring removed i_version option [ 1247.581234][ T2230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.590079][ T2215] loop8: lost filesystem error report for type 5 error -117 [ 1247.608864][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1247.623549][ C0] EXT4-fs (loop8): initial error at time 1772960670: ext4_quota_enable:7192 [ 1247.633149][ C0] EXT4-fs (loop8): last error at time 1772960670: ext4_quota_enable:7192 [ 1247.779446][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1247.779550][T29605] udevd[29605]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1247.801193][T29606] udevd[29606]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1247.813198][ T2244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2244 comm=syz.2.9148 [ 1247.838571][ T2215] EXT4-fs (loop8): Remounting filesystem read-only [ 1247.888466][ T2215] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1247.894884][ T2246] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9147'. [ 1247.918800][ T28] audit: type=1400 audit(1772960670.559:20784): avc: denied { audit_write } for pid=2241 comm="syz.2.9148" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1247.964305][ T2249] program syz.2.9149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1247.993181][ T2215] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 1248.000378][ T2230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2230 comm=syz.4.9146 [ 1248.038038][ T2215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1248.114669][T29089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.345708][ T855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.510434][ T2258] loop8: detected capacity change from 0 to 1024 [ 1248.547683][ T2258] EXT4-fs: inline encryption not supported [ 1248.607524][ T2258] EXT4-fs: Ignoring removed bh option [ 1248.613623][ T2258] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1248.640636][ T2258] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1248.657547][ T2258] EXT4-fs error (device loop8): ext4_quota_enable:7192: comm syz.8.9152: inode #2304: comm syz.8.9152: iget: illegal inode # [ 1248.678957][ T2258] loop8: lost filesystem error report for type 5 error -117 [ 1248.679402][ T2258] EXT4-fs (loop8): Remounting filesystem read-only [ 1248.693315][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1248.693335][ C1] EXT4-fs (loop8): initial error at time 1772960671: ext4_quota_enable:7192 [ 1248.693361][ C1] EXT4-fs (loop8): last error at time 1772960671: ext4_quota_enable:7192 [ 1248.848647][ T2258] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1249.071448][ T2258] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 1249.106810][ T2261] netlink: 'syz.4.9153': attribute type 1 has an invalid length. [ 1249.117290][ T2261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9153'. [ 1249.131609][ T2258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1249.378870][ T855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.421159][ T2269] loop8: detected capacity change from 0 to 128 [ 1250.246876][ T28] audit: type=1400 audit(1772960672.789:20785): avc: denied { validate_trans } for pid=2272 comm="syz.2.9157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1250.278039][ T2273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.774124][ T2282] hub 1-0:1.0: USB hub found [ 1250.828015][ T2282] hub 1-0:1.0: 8 ports detected [ 1250.851560][ T2283] loop8: detected capacity change from 0 to 128 [ 1250.896477][ T2283] EXT4-fs: Ignoring removed nobh option [ 1251.005387][ T2283] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1251.036742][ T2283] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.837488][ T855] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1251.971317][ T28] audit: type=1400 audit(1772960674.619:20786): avc: denied { read } for pid=2300 comm="syz.8.9165" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1252.367953][ T2312] loop8: detected capacity change from 0 to 512 [ 1252.453333][ T28] audit: type=1326 audit(1772960675.089:20787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.7.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197fcdc799 code=0x7ffc0000 [ 1252.603159][ T2312] EXT4-fs (loop8): 1 truncate cleaned up [ 1252.708119][ T2312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.730650][ T28] audit: type=1326 audit(1772960675.089:20788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.7.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197fcdc799 code=0x7ffc0000 [ 1252.784118][ T28] audit: type=1326 audit(1772960675.089:20789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.7.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f197fcdc799 code=0x7ffc0000 [ 1252.808738][ T28] audit: type=1326 audit(1772960675.089:20790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.7.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197fcdc799 code=0x7ffc0000 [ 1252.869220][ T28] audit: type=1326 audit(1772960675.089:20791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.7.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197fcdc799 code=0x7ffc0000 [ 1252.962650][ T28] audit: type=1326 audit(1772960675.089:20792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.7.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f197fcdc799 code=0x7ffc0000 [ 1252.986746][ T28] audit: type=1326 audit(1772960675.429:20793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.7.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197fcdc799 code=0x7ffc0000 [ 1253.010608][ T28] audit: type=1326 audit(1772960675.429:20794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.7.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197fcdc799 code=0x7ffc0000 [ 1253.116958][ T855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.177607][ T2338] loop7: detected capacity change from 0 to 1024 [ 1253.216225][ T2341] syzkaller0: entered promiscuous mode [ 1253.228507][ T2341] syzkaller0: entered allmulticast mode [ 1253.317924][ T2338] EXT4-fs: inline encryption not supported [ 1253.379183][ T2338] EXT4-fs: Ignoring removed bh option [ 1253.394200][ T2338] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1253.462554][ T2338] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1253.581053][ T2338] EXT4-fs error (device loop7): ext4_quota_enable:7192: comm syz.7.9174: inode #2304: comm syz.7.9174: iget: illegal inode # [ 1253.594465][ T2338] loop7: lost filesystem error report for type 5 error -117 [ 1253.594664][ T2338] EXT4-fs (loop7): Remounting filesystem read-only [ 1253.594699][ T2343] FAULT_INJECTION: forcing a failure. [ 1253.594699][ T2343] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.602046][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1253.622586][ T2343] CPU: 1 UID: 0 PID: 2343 Comm: syz.8.9177 Tainted: G W syzkaller #0 PREEMPT(full) [ 1253.622633][ T2343] Tainted: [W]=WARN [ 1253.622640][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1253.622652][ T2343] Call Trace: [ 1253.622659][ T2343] [ 1253.622667][ T2343] __dump_stack+0x1d/0x30 [ 1253.622762][ T2343] dump_stack_lvl+0x95/0xd0 [ 1253.622843][ T2343] dump_stack+0x15/0x1b [ 1253.622865][ T2343] should_fail_ex+0x263/0x280 [ 1253.622889][ T2343] ? io_uring_alloc_task_context+0x4c/0x2e0 [ 1253.622967][ T2343] should_failslab+0x8c/0xb0 [ 1253.622989][ T2343] __kmalloc_cache_noprof+0x5f/0x410 [ 1253.623036][ T2343] io_uring_alloc_task_context+0x4c/0x2e0 [ 1253.623095][ T2343] __io_uring_add_tctx_node+0x21d/0x300 [ 1253.623124][ T2343] __io_uring_add_tctx_node_from_submit+0x68/0xc0 [ 1253.623153][ T2343] __se_sys_io_uring_enter+0xe46/0xf50 [ 1253.623232][ T2343] ? __fget_files+0x184/0x1c0 [ 1253.623328][ T2343] ? mutex_unlock+0x4e/0x90 [ 1253.623355][ T2343] ? fput+0x8f/0xc0 [ 1253.623380][ T2343] __x64_sys_io_uring_enter+0x78/0x90 [ 1253.623411][ T2343] x64_sys_call+0x1e16/0x3020 [ 1253.623514][ T2343] do_syscall_64+0x12c/0x370 [ 1253.623536][ T2343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.623558][ T2343] RIP: 0033:0x7f2bfe3dc799 [ 1253.623643][ T2343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.623661][ T2343] RSP: 002b:00007f2bfce37028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1253.623683][ T2343] RAX: ffffffffffffffda RBX: 00007f2bfe655fa0 RCX: 00007f2bfe3dc799 [ 1253.623697][ T2343] RDX: 000000000000f9d0 RSI: 0000000000002b92 RDI: 0000000000000005 [ 1253.623711][ T2343] RBP: 00007f2bfce37090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.623724][ T2343] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1253.623737][ T2343] R13: 00007f2bfe656038 R14: 00007f2bfe655fa0 R15: 00007ffe5eedbb28 [ 1253.623910][ T2343] [ 1253.824658][ C0] EXT4-fs (loop7): initial error at time 1772960676: ext4_quota_enable:7192 [ 1253.833383][ C0] EXT4-fs (loop7): last error at time 1772960676: ext4_quota_enable:7192 [ 1253.863106][ T2338] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1253.898658][ T2350] loop6: detected capacity change from 0 to 2048 [ 1253.908747][ T2338] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1253.916027][ T2338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1253.956775][ T2352] syzkaller0: entered promiscuous mode [ 1253.978903][T29605] loop6: p1 p2 [ 1253.994549][ T2350] loop6: p1 p2 [ 1254.092215][T30065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.380978][ T2362] serio: Serial port ttyS3 [ 1255.568049][ T2380] loop8: detected capacity change from 0 to 512 [ 1255.632699][ T2383] loop4: detected capacity change from 0 to 2048 [ 1255.645165][ T2380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.679748][ T2389] syzkaller0: entered promiscuous mode [ 1255.708170][ T2380] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.721585][ T2389] syzkaller0: entered allmulticast mode [ 1255.757991][ T2380] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 1255.775264][ T2380] SELinux: failed to load policy [ 1255.787155][ T2380] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 1255.824295][ T2393] loop4: detected capacity change from 0 to 1024 [ 1255.894012][ T2393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1255.925278][ T855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.951958][ T2392] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1256.041038][ T28] audit: type=1326 audit(1772960678.689:20795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.8.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1256.078673][ T28] audit: type=1326 audit(1772960678.689:20796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.8.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1256.103517][ T28] audit: type=1326 audit(1772960678.689:20797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.8.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1256.127240][ T28] audit: type=1326 audit(1772960678.689:20798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.8.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1256.164519][ T28] audit: type=1326 audit(1772960678.689:20799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.8.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1256.206490][ T28] audit: type=1326 audit(1772960678.689:20800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.8.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1256.206778][T29089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.230145][ T28] audit: type=1326 audit(1772960678.689:20801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.8.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1256.362382][ T2428] FAULT_INJECTION: forcing a failure. [ 1256.362382][ T2428] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.375181][ T2428] CPU: 1 UID: 0 PID: 2428 Comm: syz.7.9209 Tainted: G W syzkaller #0 PREEMPT(full) [ 1256.375267][ T2428] Tainted: [W]=WARN [ 1256.375276][ T2428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1256.375288][ T2428] Call Trace: [ 1256.375298][ T2428] [ 1256.375308][ T2428] __dump_stack+0x1d/0x30 [ 1256.375338][ T2428] dump_stack_lvl+0x95/0xd0 [ 1256.375421][ T2428] dump_stack+0x15/0x1b [ 1256.375434][ T2428] should_fail_ex+0x263/0x280 [ 1256.375501][ T2428] should_failslab+0x8c/0xb0 [ 1256.375522][ T2428] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1256.375549][ T2428] ? __alloc_skb+0x2d6/0x690 [ 1256.375646][ T2428] __alloc_skb+0x2d6/0x690 [ 1256.375660][ T2428] ? __alloc_skb+0x200/0x690 [ 1256.375674][ T2428] netlink_ack+0xfd/0x500 [ 1256.375754][ T2428] ? nfnetlink_rcv+0xa66/0x1720 [ 1256.375768][ T2428] ? __kmalloc_cache_noprof+0x2f9/0x410 [ 1256.375784][ T2428] nfnetlink_rcv+0x154d/0x1720 [ 1256.375859][ T2428] netlink_unicast+0x5c0/0x690 [ 1256.375889][ T2428] netlink_sendmsg+0x5c8/0x6f0 [ 1256.375921][ T2428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.375978][ T2428] ____sys_sendmsg+0x563/0x5b0 [ 1256.376011][ T2428] ___sys_sendmsg+0x195/0x1e0 [ 1256.376038][ T2428] __x64_sys_sendmsg+0xd4/0x160 [ 1256.376059][ T2428] x64_sys_call+0x194c/0x3020 [ 1256.376112][ T2428] do_syscall_64+0x12c/0x370 [ 1256.376127][ T2428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.376141][ T2428] RIP: 0033:0x7f197fcdc799 [ 1256.376181][ T2428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.376198][ T2428] RSP: 002b:00007f197e72f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.376213][ T2428] RAX: ffffffffffffffda RBX: 00007f197ff55fa0 RCX: 00007f197fcdc799 [ 1256.376223][ T2428] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1256.376232][ T2428] RBP: 00007f197e72f090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.376298][ T2428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1256.376306][ T2428] R13: 00007f197ff56038 R14: 00007f197ff55fa0 R15: 00007ffee9a84258 [ 1256.376319][ T2428] [ 1256.666972][ T2442] loop8: detected capacity change from 0 to 1024 [ 1256.674390][ T2442] EXT4-fs: Ignoring removed orlov option [ 1256.701286][ T2442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 1256.716582][ T2442] System zones: 0-1, 3-12 [ 1256.729879][ T2442] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1256.818293][ T855] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1256.839398][ T2457] loop7: detected capacity change from 0 to 2048 [ 1256.871202][ T2461] loop6: detected capacity change from 0 to 512 [ 1256.880515][ T2463] FAULT_INJECTION: forcing a failure. [ 1256.880515][ T2463] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.897305][ T2461] program syz.6.9220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1256.900852][ T2463] CPU: 0 UID: 0 PID: 2463 Comm: syz.8.9217 Tainted: G W syzkaller #0 PREEMPT(full) [ 1256.900896][ T2463] Tainted: [W]=WARN [ 1256.900903][ T2463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1256.900918][ T2463] Call Trace: [ 1256.900926][ T2463] [ 1256.900936][ T2463] __dump_stack+0x1d/0x30 [ 1256.900962][ T2463] dump_stack_lvl+0x95/0xd0 [ 1256.900986][ T2463] dump_stack+0x15/0x1b [ 1256.901007][ T2463] should_fail_ex+0x263/0x280 [ 1256.901072][ T2463] should_failslab+0x8c/0xb0 [ 1256.901094][ T2463] kmem_cache_alloc_noprof+0x66/0x400 [ 1256.901116][ T2463] ? sk_prot_alloc+0x3f/0x180 [ 1256.901206][ T2463] sk_prot_alloc+0x3f/0x180 [ 1256.901231][ T2463] sk_alloc+0x35/0x3e0 [ 1256.901291][ T2463] ? inet_create+0x3a1/0x780 [ 1256.901331][ T2463] inet_create+0x3c0/0x780 [ 1256.901378][ T2463] __sock_create+0x2e4/0x580 [ 1256.901475][ T2463] sock_create_kern+0x38/0x50 [ 1256.901497][ T2463] start_sync_thread+0x903/0x16b0 [ 1256.901527][ T2463] ? __pfx_sync_thread_backup+0x10/0x10 [ 1256.901550][ T2463] ? should_fail_ex+0xd9/0x280 [ 1256.901635][ T2463] do_ip_vs_set_ctl+0x2e0/0xa60 [ 1256.901662][ T2463] ? do_ip_setsockopt+0x1af1/0x2290 [ 1256.901685][ T2463] nf_setsockopt+0x199/0x1b0 [ 1256.901706][ T2463] ip_setsockopt+0x102/0x110 [ 1256.901729][ T2463] sctp_setsockopt+0x126/0xea0 [ 1256.901782][ T2463] sock_common_setsockopt+0x69/0x80 [ 1256.901802][ T2463] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1256.901823][ T2463] __sys_setsockopt+0x184/0x200 [ 1256.901882][ T2463] __x64_sys_setsockopt+0x64/0x80 [ 1256.901909][ T2463] x64_sys_call+0x2327/0x3020 [ 1256.901934][ T2463] do_syscall_64+0x12c/0x370 [ 1256.901978][ T2463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.902001][ T2463] RIP: 0033:0x7f2bfe3dc799 [ 1256.902018][ T2463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.902037][ T2463] RSP: 002b:00007f2bfce37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1256.902058][ T2463] RAX: ffffffffffffffda RBX: 00007f2bfe655fa0 RCX: 00007f2bfe3dc799 [ 1256.902073][ T2463] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 1256.902130][ T2463] RBP: 00007f2bfce37090 R08: 0000000000000018 R09: 0000000000000000 [ 1256.902143][ T2463] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.902156][ T2463] R13: 00007f2bfe656038 R14: 00007f2bfe655fa0 R15: 00007ffe5eedbb28 [ 1256.902174][ T2463] [ 1256.902222][ T2463] IPVS: Error during creation of socket; terminating [ 1256.917609][ T2457] EXT4-fs (loop7): Invalid log cluster size: 16776453 [ 1257.056526][ T2467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9221'. [ 1257.158024][ T2470] loop6: detected capacity change from 0 to 2048 [ 1257.184499][ T2467] 8021q: adding VLAN 0 to HW filter on device team1 [ 1257.193435][ T2470] EXT4-fs (loop6): Invalid log cluster size: 16776453 [ 1257.298283][ T2473] FAULT_INJECTION: forcing a failure. [ 1257.298283][ T2473] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.311426][ T2473] CPU: 0 UID: 0 PID: 2473 Comm: syz.2.9223 Tainted: G W syzkaller #0 PREEMPT(full) [ 1257.311512][ T2473] Tainted: [W]=WARN [ 1257.311519][ T2473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.311530][ T2473] Call Trace: [ 1257.311537][ T2473] [ 1257.311546][ T2473] __dump_stack+0x1d/0x30 [ 1257.311575][ T2473] dump_stack_lvl+0x95/0xd0 [ 1257.311620][ T2473] dump_stack+0x15/0x1b [ 1257.311647][ T2473] should_fail_ex+0x263/0x280 [ 1257.311675][ T2473] should_failslab+0x8c/0xb0 [ 1257.311758][ T2473] __kvmalloc_node_noprof+0x155/0x650 [ 1257.311844][ T2473] ? page_pool_create_percpu+0x223/0x640 [ 1257.311869][ T2473] page_pool_create_percpu+0x223/0x640 [ 1257.311895][ T2473] page_pool_create+0x1a/0x30 [ 1257.311917][ T2473] bpf_test_run_xdp_live+0x1a8/0x1360 [ 1257.312018][ T2473] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1257.312050][ T2473] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1257.312139][ T2473] ? mutex_unlock+0x4e/0x90 [ 1257.312163][ T2473] ? 0xffffffffa02054c0 [ 1257.312192][ T2473] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 1257.312237][ T2473] ? 0xffffffffa02054c0 [ 1257.312329][ T2473] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1257.312367][ T2473] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1257.312401][ T2473] ? __rcu_read_unlock+0x4e/0x70 [ 1257.312430][ T2473] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1257.312490][ T2473] bpf_prog_test_run+0x204/0x340 [ 1257.312519][ T2473] __sys_bpf+0x52e/0x7e0 [ 1257.312655][ T2473] __x64_sys_bpf+0x41/0x50 [ 1257.312686][ T2473] x64_sys_call+0x10cb/0x3020 [ 1257.312711][ T2473] do_syscall_64+0x12c/0x370 [ 1257.312763][ T2473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.312789][ T2473] RIP: 0033:0x7f5dfbdac799 [ 1257.312809][ T2473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.312831][ T2473] RSP: 002b:00007f5dfa7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1257.312866][ T2473] RAX: ffffffffffffffda RBX: 00007f5dfc025fa0 RCX: 00007f5dfbdac799 [ 1257.312880][ T2473] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1257.312893][ T2473] RBP: 00007f5dfa7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.312965][ T2473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.312979][ T2473] R13: 00007f5dfc026038 R14: 00007f5dfc025fa0 R15: 00007ffde66d1c78 [ 1257.312996][ T2473] [ 1257.313004][ T2473] page_pool_create_percpu() gave up with errno -12 [ 1257.611672][ T2478] loop7: detected capacity change from 0 to 512 [ 1257.618318][ T2478] EXT4-fs: Ignoring removed orlov option [ 1257.921090][ T2480] loop6: detected capacity change from 0 to 512 [ 1257.927689][ T2480] EXT4-fs: Ignoring removed orlov option [ 1258.528407][ T2478] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1258.535116][ T2480] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 1259.042821][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 1259.042839][ T28] audit: type=1326 audit(1772960681.689:20896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2481 comm="syz.8.9226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x0 [ 1259.140635][ T914] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 1259.149509][ T914] bridge1 (unregistering): left promiscuous mode [ 1259.172934][ T2494] FAULT_INJECTION: forcing a failure. [ 1259.172934][ T2494] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.186820][ T2494] CPU: 1 UID: 0 PID: 2494 Comm: syz.4.9228 Tainted: G W syzkaller #0 PREEMPT(full) [ 1259.186864][ T2494] Tainted: [W]=WARN [ 1259.186872][ T2494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1259.186885][ T2494] Call Trace: [ 1259.186893][ T2494] [ 1259.186902][ T2494] __dump_stack+0x1d/0x30 [ 1259.186960][ T2494] dump_stack_lvl+0x95/0xd0 [ 1259.186985][ T2494] dump_stack+0x15/0x1b [ 1259.187059][ T2494] should_fail_ex+0x263/0x280 [ 1259.187082][ T2494] should_failslab+0x8c/0xb0 [ 1259.187103][ T2494] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1259.187136][ T2494] ? __alloc_skb+0x2d6/0x690 [ 1259.187162][ T2494] __alloc_skb+0x2d6/0x690 [ 1259.187236][ T2494] ? __alloc_skb+0x200/0x690 [ 1259.187250][ T2494] netlink_alloc_large_skb+0xbf/0xf0 [ 1259.187281][ T2494] netlink_sendmsg+0x40c/0x6f0 [ 1259.187300][ T2494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1259.187318][ T2494] ____sys_sendmsg+0x563/0x5b0 [ 1259.187338][ T2494] ___sys_sendmsg+0x195/0x1e0 [ 1259.187398][ T2494] __x64_sys_sendmsg+0xd4/0x160 [ 1259.187475][ T2494] x64_sys_call+0x194c/0x3020 [ 1259.187492][ T2494] do_syscall_64+0x12c/0x370 [ 1259.187585][ T2494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.187599][ T2494] RIP: 0033:0x7fd98deac799 [ 1259.187633][ T2494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.187646][ T2494] RSP: 002b:00007fd98c907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.187661][ T2494] RAX: ffffffffffffffda RBX: 00007fd98e125fa0 RCX: 00007fd98deac799 [ 1259.187670][ T2494] RDX: 0000000004000880 RSI: 0000200000001500 RDI: 0000000000000004 [ 1259.187754][ T2494] RBP: 00007fd98c907090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.187763][ T2494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.187771][ T2494] R13: 00007fd98e126038 R14: 00007fd98e125fa0 R15: 00007fffe3ad9c08 [ 1259.187784][ T2494] [ 1259.415751][ T2500] 9p: Bad value for 'source' [ 1259.426609][ T2500] loop8: detected capacity change from 0 to 512 [ 1259.501765][ T2500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.514542][ T2500] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.515740][ T914] bond0 (unregistering): Released all slaves [ 1259.531173][ T2500] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1259.556957][ T855] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.557641][ T914] bond1 (unregistering): Released all slaves [ 1259.580123][ T914] bond2 (unregistering): (slave vxcan5): Releasing backup interface [ 1259.593984][ T914] bond2 (unregistering): (slave vxcan7): Releasing backup interface [ 1259.608844][ T914] bond2 (unregistering): Released all slaves [ 1259.707831][ T914] tipc: Left network mode [ 1259.720288][ T2513] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9231'. [ 1259.740187][ T2541] netlink: 'syz.6.9232': attribute type 10 has an invalid length. [ 1259.756297][ T2541] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9232'. [ 1259.778555][ T914] hsr_slave_0: left promiscuous mode [ 1259.784705][ T914] hsr_slave_1: left promiscuous mode [ 1259.791498][ T2511] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1259.820722][ T2511] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.914872][ T28] audit: type=1326 audit(1772960682.559:20897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.6.9232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1259.980748][ T28] audit: type=1326 audit(1772960682.559:20898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.6.9232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c6cac799 code=0x7ffc0000 [ 1260.013111][ T855] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1260.064099][ T2557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1260.104704][ T2557] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1260.124256][ T2570] tipc: Enabling of bearer rejected, failed to enable media [ 1260.137055][ T2570] syzkaller0: entered promiscuous mode [ 1260.146444][ T2570] syzkaller0: entered allmulticast mode [ 1260.212682][T29089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.281404][ T28] audit: type=1400 audit(1772960682.929:20899): avc: denied { append } for pid=2597 comm="syz.8.9244" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1260.337657][ T28] audit: type=1400 audit(1772960682.969:20900): avc: denied { ioctl } for pid=2602 comm="syz.8.9246" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1260.450655][ T2610] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1260.466453][ T2610] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1260.521519][ T855] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1260.543353][T13668] IPVS: starting estimator thread 0... [ 1260.638742][ T2638] IPVS: using max 2736 ests per chain, 136800 per kthread [ 1260.675224][ T2648] Invalid argument reading file caps for ./file0 [ 1260.719533][ T2652] tipc: Enabling of bearer rejected, failed to enable media [ 1260.729210][ T2652] syzkaller0: entered promiscuous mode [ 1260.734943][ T2652] syzkaller0: entered allmulticast mode [ 1260.871526][ T2659] set_capacity_and_notify: 3 callbacks suppressed [ 1260.871571][ T2659] loop6: detected capacity change from 0 to 1764 [ 1260.889158][ T2659] iso9660: Unknown parameter 'shozassoc' [ 1261.019014][ T2670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9258'. [ 1261.034598][ T2670] binfmt_misc: register: failed to install interpreter file ./file0 [ 1261.044570][ T2670] random: crng reseeded on system resumption [ 1261.056672][ T2670] loop6: detected capacity change from 0 to 512 [ 1261.064308][ T2675] FAULT_INJECTION: forcing a failure. [ 1261.064308][ T2675] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.076969][ T2675] CPU: 1 UID: 0 PID: 2675 Comm: syz.4.9259 Tainted: G W syzkaller #0 PREEMPT(full) [ 1261.077005][ T2675] Tainted: [W]=WARN [ 1261.077013][ T2675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1261.077028][ T2675] Call Trace: [ 1261.077037][ T2675] [ 1261.077047][ T2675] __dump_stack+0x1d/0x30 [ 1261.077120][ T2675] dump_stack_lvl+0x95/0xd0 [ 1261.077143][ T2675] dump_stack+0x15/0x1b [ 1261.077167][ T2675] should_fail_ex+0x263/0x280 [ 1261.077254][ T2675] should_failslab+0x8c/0xb0 [ 1261.077274][ T2675] __kmalloc_noprof+0xb8/0x4e0 [ 1261.077373][ T2675] ? ___neigh_create+0x4c9/0x12a0 [ 1261.077401][ T2675] ___neigh_create+0x4c9/0x12a0 [ 1261.077429][ T2675] ? avc_has_perm+0x101/0x190 [ 1261.077530][ T2675] ? selinux_ip_postroute+0xb56/0xba0 [ 1261.077556][ T2675] __neigh_create+0x54/0x70 [ 1261.077580][ T2675] ip6_finish_output2+0x456/0xd70 [ 1261.077656][ T2675] ? nf_nat_ipv6_out+0x187/0x230 [ 1261.077680][ T2675] ? __rcu_read_unlock+0x33/0x70 [ 1261.077699][ T2675] ? __pfx_ip6_mtu+0x10/0x10 [ 1261.077724][ T2675] ip6_finish_output+0x1e1/0x410 [ 1261.077747][ T2675] ip6_output+0x10a/0x280 [ 1261.077766][ T2675] ? __pfx_ip6_finish_output+0x10/0x10 [ 1261.077854][ T2675] ? __pfx_ip6_output+0x10/0x10 [ 1261.077878][ T2675] ip6_xmit+0x861/0xc40 [ 1261.077918][ T2675] ? __pfx_dst_output+0x10/0x10 [ 1261.077939][ T2675] tcp_v6_send_response+0xc56/0xf30 [ 1261.077984][ T2675] tcp_v6_send_reset+0x785/0x990 [ 1261.078006][ T2675] ? tcp_v6_fill_cb+0xdb/0x1b0 [ 1261.078035][ T2675] tcp_v6_rcv+0x152d/0x1c60 [ 1261.078144][ T2675] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1261.078168][ T2675] ip6_protocol_deliver_rcu+0xa24/0x10f0 [ 1261.078272][ T2675] ip6_input_finish+0xf0/0x1c0 [ 1261.078296][ T2675] ip6_input+0x5e/0x160 [ 1261.078386][ T2675] ? __pfx_ip6_input_finish+0x10/0x10 [ 1261.078416][ T2675] ? __pfx_ip6_input+0x10/0x10 [ 1261.078445][ T2675] ip6_rcv_finish+0x1f5/0x330 [ 1261.078527][ T2675] ipv6_rcv+0x72/0x170 [ 1261.078549][ T2675] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1261.078573][ T2675] netif_receive_skb+0xc5/0x530 [ 1261.078607][ T2675] ? tun_rx_batched+0xd1/0x440 [ 1261.078633][ T2675] tun_rx_batched+0x106/0x440 [ 1261.078660][ T2675] tun_get_user+0x2011/0x27c0 [ 1261.078703][ T2675] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1261.078783][ T2675] tun_chr_write_iter+0x15e/0x210 [ 1261.078806][ T2675] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1261.078824][ T2675] vfs_write+0x5a6/0x9f0 [ 1261.078894][ T2675] ksys_write+0xdc/0x1a0 [ 1261.078930][ T2675] __x64_sys_write+0x40/0x50 [ 1261.078951][ T2675] x64_sys_call+0x27e1/0x3020 [ 1261.079051][ T2675] do_syscall_64+0x12c/0x370 [ 1261.079082][ T2675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.079107][ T2675] RIP: 0033:0x7fd98de6cfce [ 1261.079128][ T2675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1261.079150][ T2675] RSP: 002b:00007fd98c906fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1261.079198][ T2675] RAX: ffffffffffffffda RBX: 00007fd98c9076c0 RCX: 00007fd98de6cfce [ 1261.079238][ T2675] RDX: 000000000000004a RSI: 0000200000000280 RDI: 00000000000000c8 [ 1261.079255][ T2675] RBP: 00007fd98c907090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.079271][ T2675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.079285][ T2675] R13: 00007fd98e126038 R14: 00007fd98e125fa0 R15: 00007fffe3ad9c08 [ 1261.079341][ T2675] [ 1261.392024][ T28] audit: type=1400 audit(1772960684.029:20901): avc: denied { mounton } for pid=2669 comm="syz.6.9258" path="/328/file0" dev="tmpfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1261.506143][ T2682] netlink: 'syz.4.9260': attribute type 21 has an invalid length. [ 1261.527315][ T2682] netlink: 'syz.4.9260': attribute type 1 has an invalid length. [ 1261.562513][ T2682] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9260'. [ 1261.627196][ T2688] loop7: detected capacity change from 0 to 128 [ 1261.644829][ T2695] FAULT_INJECTION: forcing a failure. [ 1261.644829][ T2695] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.669722][ T2688] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1261.697429][ T2695] CPU: 0 UID: 0 PID: 2695 Comm: syz.6.9263 Tainted: G W syzkaller #0 PREEMPT(full) [ 1261.697464][ T2695] Tainted: [W]=WARN [ 1261.697472][ T2695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1261.697493][ T2695] Call Trace: [ 1261.697502][ T2695] [ 1261.697518][ T2695] __dump_stack+0x1d/0x30 [ 1261.697550][ T2695] dump_stack_lvl+0x95/0xd0 [ 1261.697647][ T2695] dump_stack+0x15/0x1b [ 1261.697674][ T2695] should_fail_ex+0x263/0x280 [ 1261.697700][ T2695] should_failslab+0x8c/0xb0 [ 1261.697758][ T2695] __kmalloc_noprof+0xb8/0x4e0 [ 1261.697818][ T2695] ? nft_trans_alloc+0x1e/0x100 [ 1261.697852][ T2695] nft_trans_alloc+0x1e/0x100 [ 1261.698007][ T2695] nf_tables_newsetelem+0x2133/0x2dc0 [ 1261.698127][ T2695] ? nf_tables_commit+0x53c8/0x5960 [ 1261.698198][ T2695] ? perf_prepare_sample+0xe50/0x1280 [ 1261.698243][ T2695] nfnetlink_rcv+0xc1e/0x1720 [ 1261.698290][ T2695] netlink_unicast+0x5c0/0x690 [ 1261.698353][ T2695] netlink_sendmsg+0x5c8/0x6f0 [ 1261.698452][ T2695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1261.698479][ T2695] ____sys_sendmsg+0x563/0x5b0 [ 1261.698507][ T2695] ___sys_sendmsg+0x195/0x1e0 [ 1261.698600][ T2695] __x64_sys_sendmsg+0xd4/0x160 [ 1261.698644][ T2695] x64_sys_call+0x194c/0x3020 [ 1261.698705][ T2695] do_syscall_64+0x12c/0x370 [ 1261.698739][ T2695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.698843][ T2695] RIP: 0033:0x7fb8c6cac799 [ 1261.698875][ T2695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.698896][ T2695] RSP: 002b:00007fb8c56ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1261.698918][ T2695] RAX: ffffffffffffffda RBX: 00007fb8c6f25fa0 RCX: 00007fb8c6cac799 [ 1261.698932][ T2695] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1261.698969][ T2695] RBP: 00007fb8c56ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.698983][ T2695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.698999][ T2695] R13: 00007fb8c6f26038 R14: 00007fb8c6f25fa0 R15: 00007ffcf3fb0988 [ 1261.699022][ T2695] [ 1261.948486][ T2688] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.016199][ T2704] FAULT_INJECTION: forcing a failure. [ 1262.016199][ T2704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.030529][ T2704] CPU: 0 UID: 0 PID: 2704 Comm: syz.8.9265 Tainted: G W syzkaller #0 PREEMPT(full) [ 1262.030648][ T2704] Tainted: [W]=WARN [ 1262.030656][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1262.030671][ T2704] Call Trace: [ 1262.030678][ T2704] [ 1262.030688][ T2704] __dump_stack+0x1d/0x30 [ 1262.030719][ T2704] dump_stack_lvl+0x95/0xd0 [ 1262.030744][ T2704] dump_stack+0x15/0x1b [ 1262.030778][ T2704] should_fail_ex+0x263/0x280 [ 1262.030805][ T2704] should_fail+0xb/0x20 [ 1262.030827][ T2704] should_fail_usercopy+0x1a/0x20 [ 1262.030895][ T2704] _copy_to_user+0x20/0xa0 [ 1262.030919][ T2704] simple_read_from_buffer+0xb5/0x130 [ 1262.030946][ T2704] proc_fail_nth_read+0x10e/0x150 [ 1262.030980][ T2704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1262.031044][ T2704] vfs_read+0x1ab/0x7f0 [ 1262.031154][ T2704] ? fdget_pos+0x13e/0x1d0 [ 1262.031181][ T2704] ? mutex_lock+0x57/0x90 [ 1262.031245][ T2704] ksys_read+0xdc/0x1a0 [ 1262.031282][ T2704] __x64_sys_read+0x40/0x50 [ 1262.031300][ T2704] x64_sys_call+0x2886/0x3020 [ 1262.031348][ T2704] do_syscall_64+0x12c/0x370 [ 1262.031371][ T2704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.031397][ T2704] RIP: 0033:0x7f2bfe39cfce [ 1262.031430][ T2704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1262.031474][ T2704] RSP: 002b:00007f2bfce36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1262.031495][ T2704] RAX: ffffffffffffffda RBX: 00007f2bfce376c0 RCX: 00007f2bfe39cfce [ 1262.031508][ T2704] RDX: 000000000000000f RSI: 00007f2bfce370a0 RDI: 0000000000000006 [ 1262.031565][ T2704] RBP: 00007f2bfce37090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.031580][ T2704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.031596][ T2704] R13: 00007f2bfe656038 R14: 00007f2bfe655fa0 R15: 00007ffe5eedbb28 [ 1262.031615][ T2704] [ 1262.232246][T30065] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1262.328364][ T2721] loop6: detected capacity change from 0 to 512 [ 1262.337475][ T28] audit: type=1400 audit(1772960684.969:20902): avc: denied { module_load } for pid=2707 comm="syz.6.9268" path="/331/file0" dev="tmpfs" ino=1805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1262.407877][ T2731] loop7: detected capacity change from 0 to 1024 [ 1262.408606][ T2721] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1262.431646][ T2721] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1262.450324][ T2731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1262.482004][ T2731] ext4 filesystem being mounted at /262/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.492262][ T2708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.493825][ T2747] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9272: bg 0: block 112: padding at end of block bitmap is not set [ 1262.504214][ T2708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.535788][T30065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1262.566867][ T2753] syzkaller0: entered promiscuous mode [ 1262.572626][ T2753] syzkaller0: entered allmulticast mode [ 1262.733132][ T2761] loop4: detected capacity change from 0 to 1024 [ 1262.740194][ T2761] EXT4-fs: inline encryption not supported [ 1262.746086][ T2761] EXT4-fs: Ignoring removed bh option [ 1262.863368][ T2761] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1262.874534][ T2761] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1262.883694][ T2761] EXT4-fs error (device loop4): ext4_quota_enable:7192: comm syz.4.9274: inode #2304: comm syz.4.9274: iget: illegal inode # [ 1262.897319][ T2761] loop4: lost filesystem error report for type 5 error -117 [ 1262.897480][ T2761] EXT4-fs (loop4): Remounting filesystem read-only [ 1262.904914][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1262.904937][ C1] EXT4-fs (loop4): initial error at time 1772960685: ext4_quota_enable:7192 [ 1262.904975][ C1] EXT4-fs (loop4): last error at time 1772960685: ext4_quota_enable:7192 [ 1262.935313][ T2761] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1262.950487][ T2761] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1262.958441][ T2761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1263.671480][ T2787] loop7: detected capacity change from 0 to 2048 [ 1263.693093][ T2792] loop6: detected capacity change from 0 to 128 [ 1263.712663][T29089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.725689][ T2792] ext4: Unknown parameter 'dont_hash' [ 1263.832636][ T2797] netlink: 'syz.8.9282': attribute type 5 has an invalid length. [ 1263.856452][T29606] loop7: p2 p4 [ 1263.866650][T29606] loop7: p2 size 851968 extends beyond EOD, truncated [ 1263.879155][ T2806] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1263.892493][T29606] loop7: p4 size 722688 extends beyond EOD, truncated [ 1263.984782][ T2813] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9281'. [ 1264.006587][ T2814] loop4: detected capacity change from 0 to 512 [ 1264.015040][ T2814] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1264.095541][ T2816] syzkaller0: entered promiscuous mode [ 1264.136703][ T2816] syzkaller0: entered allmulticast mode [ 1264.397386][ T2787] loop7: p2 p4 [ 1264.412851][ T2787] loop7: p2 size 851968 extends beyond EOD, truncated [ 1264.458253][ T2787] loop7: p4 size 722688 extends beyond EOD, truncated [ 1264.630058][T29605] udevd[29605]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1264.640403][T29606] udevd[29606]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1264.752117][ T2866] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9293'. [ 1264.782018][ T2866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9293'. [ 1265.092255][ T2903] bridge2: entered promiscuous mode [ 1265.505975][ T28] audit: type=1326 audit(1772960688.149:20903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.550253][ T28] audit: type=1326 audit(1772960688.199:20904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.621253][ T28] audit: type=1326 audit(1772960688.199:20905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.659152][ T28] audit: type=1326 audit(1772960688.199:20906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.718296][ T2922] loop7: detected capacity change from 0 to 1024 [ 1265.729215][ T28] audit: type=1326 audit(1772960688.199:20907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.760454][ T2922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1265.778417][ T28] audit: type=1326 audit(1772960688.199:20908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.802401][ T28] audit: type=1326 audit(1772960688.199:20909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.828686][ T28] audit: type=1326 audit(1772960688.199:20910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bfe39cfce code=0x7ffc0000 [ 1265.853197][ T28] audit: type=1326 audit(1772960688.199:20911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.869168][ T2922] syzkaller0: entered promiscuous mode [ 1265.876852][ T28] audit: type=1326 audit(1772960688.199:20912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.8.9295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2bfe3dc799 code=0x7ffc0000 [ 1265.926413][ T2922] syzkaller0: entered allmulticast mode [ 1266.109472][T30065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.792543][ T2944] bond1: left promiscuous mode [ 1266.849965][ T2945] loop4: detected capacity change from 0 to 8192 [ 1266.893097][ T2945] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1266.955435][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.004817][ T2944] FAT-fs (loop4): Filesystem has been set read-only [ 1267.011838][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.028441][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.042411][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.053503][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.062930][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.072523][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.092160][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.102602][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.111808][ T2944] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1267.122553][ T2945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9304'. [ 1267.274352][ T2959] serio: Serial port ttyS3 [ 1267.596343][ T3020] loop6: detected capacity change from 0 to 128 [ 1267.615803][ T3020] ext4: Unknown parameter 'dont_hash' [ 1267.660175][ T3007] 9p: Bad value for 'rfdno' [ 1267.854696][ T3029] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9309'. [ 1268.492837][ T3054] netlink: 'syz.4.9316': attribute type 21 has an invalid length. [ 1268.518547][ T3054] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9316'. [ 1268.538485][ T3052] sg_write: data in/out 25820/69 bytes for SCSI command 0x0-- guessing data in; [ 1268.538485][ T3052] program syz.2.9315 not setting count and/or reply_len properly [ 1268.558922][ T3055] netlink: 'syz.4.9316': attribute type 10 has an invalid length. [ 1268.583587][ T3055] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1268.802874][ T3075] loop7: detected capacity change from 0 to 1024 [ 1269.438952][ T3075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.480072][ T3088] FAULT_INJECTION: forcing a failure. [ 1269.480072][ T3088] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.525017][T30065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.548547][ T3088] CPU: 0 UID: 0 PID: 3088 Comm: syz.6.9321 Tainted: G W syzkaller #0 PREEMPT(full) [ 1269.548615][ T3088] Tainted: [W]=WARN [ 1269.548622][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.548666][ T3088] Call Trace: [ 1269.548672][ T3088] [ 1269.548679][ T3088] __dump_stack+0x1d/0x30 [ 1269.548708][ T3088] dump_stack_lvl+0x95/0xd0 [ 1269.548740][ T3088] dump_stack+0x15/0x1b [ 1269.548822][ T3088] should_fail_ex+0x263/0x280 [ 1269.548846][ T3088] should_failslab+0x8c/0xb0 [ 1269.548871][ T3088] __kmalloc_noprof+0xb8/0x4e0 [ 1269.548898][ T3088] ? sock_kmalloc+0x85/0xc0 [ 1269.548983][ T3088] sock_kmalloc+0x85/0xc0 [ 1269.549009][ T3088] ____sys_sendmsg+0xf9/0x5b0 [ 1269.549070][ T3088] ___sys_sendmsg+0x195/0x1e0 [ 1269.549132][ T3088] __x64_sys_sendmsg+0xd4/0x160 [ 1269.549163][ T3088] x64_sys_call+0x194c/0x3020 [ 1269.549195][ T3088] do_syscall_64+0x12c/0x370 [ 1269.549220][ T3088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.549277][ T3088] RIP: 0033:0x7fb8c6cac799 [ 1269.549292][ T3088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.549309][ T3088] RSP: 002b:00007fb8c56ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.549413][ T3088] RAX: ffffffffffffffda RBX: 00007fb8c6f25fa0 RCX: 00007fb8c6cac799 [ 1269.549427][ T3088] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1269.549440][ T3088] RBP: 00007fb8c56ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.549452][ T3088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.549464][ T3088] R13: 00007fb8c6f26038 R14: 00007fb8c6f25fa0 R15: 00007ffcf3fb0988 [ 1269.549561][ T3088] [ 1269.880391][ T3105] loop4: detected capacity change from 0 to 128 [ 1269.907476][ T3105] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1269.920143][ T3105] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1269.959667][T29089] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1270.079192][ T3128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9326'. [ 1270.138849][ T3134] loop4: detected capacity change from 0 to 512 [ 1270.168707][ T3134] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1270.200446][ T3140] loop6: detected capacity change from 0 to 128 [ 1270.233873][ T3140] ext4: Unknown parameter 'dont_hash' [ 1270.491419][ T3167] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9331'. [ 1270.667665][ T3168] serio: Serial port ttyS3 [ 1272.160804][ T3182] loop6: detected capacity change from 0 to 128 [ 1272.209725][ T3182] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1272.222828][ T3182] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.465046][T28382] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1272.543995][ T3196] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1272.611739][ T3196] loop6: detected capacity change from 0 to 512 [ 1272.629213][ T3196] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1272.747242][ T3215] loop4: detected capacity change from 0 to 8192 [ 1272.773755][T31719] ================================================================== [ 1272.781883][T31719] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 1272.789192][T31719] [ 1272.791518][T31719] read to 0xffff88811b76b540 of 4 bytes by task 23173 on cpu 0: [ 1272.799150][T31719] atime_needs_update+0x25f/0x3e0 [ 1272.804184][T31719] touch_atime+0x4a/0x330 [ 1272.808521][T31719] shmem_file_read_iter+0x477/0x540 [ 1272.813735][T31719] lo_rw_aio+0x67d/0x730 [ 1272.817984][T31719] loop_process_work+0x56c/0xac0 [ 1272.822933][T31719] loop_rootcg_workfn+0x22/0x30 [ 1272.827802][T31719] process_scheduled_works+0x4de/0x9e0 [ 1272.833444][T31719] worker_thread+0x581/0x770 [ 1272.838127][T31719] kthread+0x22a/0x280 [ 1272.842198][T31719] ret_from_fork+0x150/0x360 [ 1272.846800][T31719] ret_from_fork_asm+0x1a/0x30 [ 1272.851570][T31719] [ 1272.853895][T31719] write to 0xffff88811b76b540 of 4 bytes by task 31719 on cpu 1: [ 1272.861618][T31719] touch_atime+0x1d7/0x330 [ 1272.866238][T31719] shmem_file_read_iter+0x477/0x540 [ 1272.871463][T31719] lo_rw_aio+0x67d/0x730 [ 1272.875715][T31719] loop_process_work+0x56c/0xac0 [ 1272.880657][T31719] loop_workfn+0x31/0x40 [ 1272.884914][T31719] process_scheduled_works+0x4de/0x9e0 [ 1272.890491][T31719] worker_thread+0x581/0x770 [ 1272.895178][T31719] kthread+0x22a/0x280 [ 1272.899277][T31719] ret_from_fork+0x150/0x360 [ 1272.903977][T31719] ret_from_fork_asm+0x1a/0x30 [ 1272.908750][T31719] [ 1272.911091][T31719] value changed: 0x186a5b05 -> 0x1902f185 [ 1272.916803][T31719] [ 1272.919384][T31719] Reported by Kernel Concurrency Sanitizer on: [ 1272.925538][T31719] CPU: 1 UID: 0 PID: 31719 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT(full) [ 1272.936652][T31719] Tainted: [W]=WARN [ 1272.940462][T31719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1272.950527][T31719] Workqueue: loop4 loop_workfn [ 1272.955309][T31719] ================================================================== [ 1273.008998][ T3220] FAULT_INJECTION: forcing a failure. [ 1273.008998][ T3220] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.023343][ T3220] CPU: 0 UID: 0 PID: 3220 Comm: syz.2.9344 Tainted: G W syzkaller #0 PREEMPT(full) [ 1273.023380][ T3220] Tainted: [W]=WARN [ 1273.023388][ T3220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1273.023453][ T3220] Call Trace: [ 1273.023462][ T3220] [ 1273.023472][ T3220] __dump_stack+0x1d/0x30 [ 1273.023502][ T3220] dump_stack_lvl+0x95/0xd0 [ 1273.023526][ T3220] dump_stack+0x15/0x1b [ 1273.023624][ T3220] should_fail_ex+0x263/0x280 [ 1273.023651][ T3220] should_failslab+0x8c/0xb0 [ 1273.023755][ T3220] __kmalloc_noprof+0xb8/0x4e0 [ 1273.023780][ T3220] ? security_inode_init_security+0xb4/0x320 [ 1273.023812][ T3220] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1273.023846][ T3220] security_inode_init_security+0xb4/0x320 [ 1273.023945][ T3220] ? simple_acl_create+0x328/0x370 [ 1273.023978][ T3220] shmem_mknod+0xaa/0x170 [ 1273.024012][ T3220] shmem_create+0x34/0x50 [ 1273.024055][ T3220] ? __pfx_shmem_create+0x10/0x10 [ 1273.024144][ T3220] path_openat+0xd75/0x2050 [ 1273.024184][ T3220] do_file_open+0x16c/0x290 [ 1273.024300][ T3220] do_sys_openat2+0x94/0x130 [ 1273.024333][ T3220] __x64_sys_openat+0xf2/0x120 [ 1273.024378][ T3220] x64_sys_call+0x1e39/0x3020 [ 1273.024407][ T3220] do_syscall_64+0x12c/0x370 [ 1273.024462][ T3220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.024486][ T3220] RIP: 0033:0x7f5dfbdac799 [ 1273.024542][ T3220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.024589][ T3220] RSP: 002b:00007f5dfa7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1273.024613][ T3220] RAX: ffffffffffffffda RBX: 00007f5dfc025fa0 RCX: 00007f5dfbdac799 [ 1273.024628][ T3220] RDX: 00000000000281c2 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1273.024644][ T3220] RBP: 00007f5dfa7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.024659][ T3220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.024673][ T3220] R13: 00007f5dfc026038 R14: 00007f5dfc025fa0 R15: 00007ffde66d1c78 [ 1273.024693][ T3220] [ 1273.471872][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1273.471889][ T28] audit: type=1326 audit(1772960696.079:20919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.542220][ T28] audit: type=1326 audit(1772960696.079:20920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.616508][ T28] audit: type=1326 audit(1772960696.079:20921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.668485][ T28] audit: type=1326 audit(1772960696.079:20923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.700412][ T28] audit: type=1326 audit(1772960696.079:20922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.730966][ T28] audit: type=1326 audit(1772960696.079:20924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.754871][ T28] audit: type=1326 audit(1772960696.079:20925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.778615][ T28] audit: type=1326 audit(1772960696.079:20926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.812636][ T28] audit: type=1326 audit(1772960696.079:20927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98deac799 code=0x7ffc0000 [ 1273.836564][ T28] audit: type=1326 audit(1772960696.079:20928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.4.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd98deac799 code=0x7ffc0000