last executing test programs: 2m23.758114191s ago: executing program 2 (id=2378): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc096, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x471, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000601010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) 2m23.655956936s ago: executing program 2 (id=2379): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd701004000000080000000800090002"], 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2m23.465663016s ago: executing program 2 (id=2380): connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x749, &(0x7f0000000940)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x9, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000000), 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000"], 0x10c}}, 0x0) 2m23.094024425s ago: executing program 2 (id=2386): syslog(0x3, 0xfffffffffffffffc, 0x61) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x4280, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000001040)) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x115b2, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu +pids'], 0xb) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x2000008, &(0x7f00000002c0)={[{@barrier}, {@grpid}, {@noinit_itable}]}, 0xde, 0x439, &(0x7f0000000500)="$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") r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="43d0945b6414f5151a53ab266fd9fb2fcbfd6e244e74a0e405d57016ff18699ffca719e4ba8b57d7d48b164cf7dd26cffcf535e85b92d4a03ad3327eaade84015ce7e5d0aeb0706e975fc6fc1c4a34abc4f8385ce6928d6e1cc03bd4e2294f84e561a1287aeca68f0e5d53", 0x6b, 0xfffffffffffffff9) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r7, 0x1) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000b) write$cgroup_subtree(r8, &(0x7f0000000580)={[{0x2d, 'freezer'}]}, 0x9) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 2m22.352868523s ago: executing program 2 (id=2394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x80000) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x8, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socketpair(0x2c, 0x6, 0x39b2, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x408080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_USERDATA={0x103, 0x7, 0x1, 0x0, "467b52cd9bf34fd71f3fa6cd21bda67a78b3805fa5cb820036c8b91c35e0cff5098fa923c58dbd8b08f62f19d90c8d2854ea9feefe622c6e16a001dbd2bcc6a8bbf70a029c171e4afa506c44a09673b91d6ec97e3eb3f36077ad46912a6de28a7856bebfb30c4e149f70f2c835a88d32525088f1d1e300ad0a92de042ee8b087841a9a3433dfc1dff81fa709ae3455731fde2a72d49e89be4b25ab146ec8ddde0ac3337b04382803a31733e3fb6fbb35cc23958ce12d377b9a6b70aed2dd2a6180567088fa587bf49589720ae888dea4bf170c505ae9807863f625b947447a07eb586318313cd394819c46539408ab76bdc9caedde7332711c1e2eccd13ecc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x184}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.249953859s ago: executing program 2 (id=2409): r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x9, 0xd, 0x93, 0xe5, 0x0, 0xca02, 0x204, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9d, 0x7fffffffffffffff}, 0x9112, 0x5, 0x2, 0x8, 0x58ae0a55, 0x7, 0x1, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x9193, 0x0, 0x10000, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r0, 0x1) unshare(0x60000600) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m20.247482559s ago: executing program 32 (id=2409): r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x9, 0xd, 0x93, 0xe5, 0x0, 0xca02, 0x204, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9d, 0x7fffffffffffffff}, 0x9112, 0x5, 0x2, 0x8, 0x58ae0a55, 0x7, 0x1, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x9193, 0x0, 0x10000, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r0, 0x1) unshare(0x60000600) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 30.472315641s ago: executing program 0 (id=3199): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000300000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a300000000030000380"], 0x104}}, 0x0) 30.263830981s ago: executing program 0 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 30.262895821s ago: executing program 0 (id=3207): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x8028451f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9f08000000000000006beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9ab97800001022f987617c31850000000000000000000900008000", 0x3c}, 0x60) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x686, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000003c0)="3005df", 0x3, r5) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r5) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 29.30735332s ago: executing program 0 (id=3215): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0xffffd000) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x1, r8, &(0x7f00000001c0), 0x100000000000ffff) ppoll(0x0, 0x0, 0x0, 0x0, 0xea) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, &(0x7f00000002c0)={[0x537e]}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700082f00fe800000000000000000000000000000ff0200000000000000000000000000018100"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) dup2(r6, r7) fcntl$setown(r7, 0x8, r5) tkill(r5, 0x13) r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="4eef4c6de6fb4ec7"}}) mprotect(&(0x7f0000019000/0x2000)=nil, 0x2000, 0x2) 26.232301866s ago: executing program 0 (id=3241): socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x4400, &(0x7f0000000200), 0x1, 0x528, &(0x7f0000000b00)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000bc0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 25.870693155s ago: executing program 0 (id=3244): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2005080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xe6d}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r3) 25.868880475s ago: executing program 33 (id=3244): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2005080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xe6d}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r3) 18.200791395s ago: executing program 4 (id=3298): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@init_itable}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x555, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) epoll_create1(0x80000) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x54d, &(0x7f0000000540)={0x0, 0x735d, 0x100, 0x805, 0x350}, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) 17.534159949s ago: executing program 4 (id=3303): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0xfe00, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 13.076103665s ago: executing program 4 (id=3340): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000940)="2f0000001e005f0214fffffffffffff8070000001d00000000000000080009000d000f0000002a5fda7874ea41c181", 0x2f) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) pipe(&(0x7f00000001c0)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf25060000003c00018014000200767863616e31000000000000000000001400020073797a6b616c6c657231000000000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="0c000180080003000500000040000180080003000300007fbcfd75649de694001400020076657468305f746f5f6873720000000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x200c0000}, 0x4810) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x20f6b1, 0x3180, 0x20000003, 0x60024e}, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40880, 0x120) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000500)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x12, 0x1}) io_uring_enter(r6, 0xd44, 0x44c1, 0x7, 0x0, 0x0) syz_usb_connect(0x500, 0x24, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 9.831486041s ago: executing program 4 (id=3360): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettaction={0x38, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xef3e}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @mss={0x2, 0xc4}, @timestamp, @mss={0x2, 0xd}, @window={0x3, 0x10, 0x9}], 0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r7, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r9, 0x0, 0x9, 0x4) read(r9, &(0x7f0000000080)=""/221, 0xdd) syz_open_pts(r8, 0x40601) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 7.640291712s ago: executing program 4 (id=3368): ioprio_set$pid(0xa1d8ab0b37b4ad3a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x800007, 0x40010, 0xffffffffffffffff, 0x6d049000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync_file_range(0xffffffffffffffff, 0x5, 0x4, 0x2) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x4000000, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x40044fd, 0x40000003, 0x28, 0x0, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x4000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) unshare(0x42040000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 6.347949887s ago: executing program 6 (id=3375): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='projid_map\x00') name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@isofs_parent={0x14, 0x2, {0x10, 0x7, 0x10, 0x9, 0x5, 0x4}}, &(0x7f00000000c0), 0x1400) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000017c0)=""/177, 0xb1}], 0x1, 0x7, 0xbb18) 6.071724072s ago: executing program 6 (id=3376): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000940)="2f0000001e005f0214fffffffffffff8070000001d00000000000000080009000d000f0000002a5fda7874ea41c181", 0x2f) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) pipe(&(0x7f00000001c0)) r2 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c000000", @ANYRES16, @ANYBLOB="000226bd7000fddbdf25060000003c00018014000200767863616e31000000000000000000001400020073797a6b616c6c657231000000000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="0c000180080003000500000040000180080003000300007fbcfd75649de694001400020076657468305f746f5f6873720000000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x200c0000}, 0x4810) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x20f6b1, 0x3180, 0x20000003, 0x60024e}, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40880, 0x120) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000500)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x12, 0x1}) io_uring_enter(r6, 0xd44, 0x44c1, 0x7, 0x0, 0x0) syz_usb_connect(0x500, 0x24, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 5.063652113s ago: executing program 1 (id=3382): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net\x00') fcntl$setstatus(r0, 0x4, 0x40800) r1 = syz_io_uring_setup(0xbd9, &(0x7f00000002c0)={0x0, 0x9009, 0x1000, 0x0, 0x3c3}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xa1f, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d0a"], &(0x7f0000000f40)=""/4086, 0x31, 0xff6, 0x5}, 0x28) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c095}, 0x20000080) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}}) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x9da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 4.994999616s ago: executing program 4 (id=3384): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0xfe00, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4.934763799s ago: executing program 3 (id=3386): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 4.752243539s ago: executing program 1 (id=3388): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file1\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, 0x0, 0x90000, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc0c0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004) 4.279816802s ago: executing program 3 (id=3389): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x2000000009, 0x8, 0x3) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 4.219106656s ago: executing program 1 (id=3390): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) gettimeofday(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000080)={0x0, 0x400, 0x8}}) 4.1322066s ago: executing program 1 (id=3391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)="efa583b7b1fd009eb3d03cb048375d1e589c2cdd27f8a8753cf2ad353f95d526fa9ea7318e7fb4e5b78258383f6e4bb0c0dfaed8613ee3557781fc74731f583903c50812d33f656f07b21130d1e79596cc092bce7017ea71e2b939858bc66e1337eecf06a3083a4df7b2a1b3c710eac691b468ba5affed91821c1f296effd8643e92a4d9bae717d004f9ed531f7306e6a4eeff64462518039449f4e66631ba", 0x9f}, {&(0x7f0000000600)}, {&(0x7f0000000740)="a2a4e3a366c97ca927246996eff20f2e2e52063a5720fdebcf410e1a85e7347f8ab9ce24bcb3af67bc1614062fd54202537e3703b3c451849adfec22222e3bd0ce79584e636d4ee5050c18e86c4532c808ccd8085465b0881f96069a297d91d55a40d2945ccab042ddf9c3b623c882ee0bcbd76ac89b4121b30487cd72faa53eb927fa57615605579b195e11301e25f2e24c3a9b1ca001f6", 0x98}, {&(0x7f0000000800)="d813fccb0394c548916beb6aac21c37ba502729c16f55615c70710c5e27e48806d97fda18906073ab7b59a97432cae1003b9e68159e9c643f181d34b62ff80e7985554072d96bb70eac4b87203b20bf7efa6dce65cffab6c97c978a783c016dbe156cb493a1c9a519b4d8087f774147caf96a93076c110a3bb07a55b2082e10c8067f4ecfd824ec50d20fc0efc501666261e1a312966f0eb8832b4d25bcec41bbf65aed62a8d96124902cf9e0c4e3a65a0ae9760a4638e4a2dc1a3d7ba9c1440e3674f3b18d8db7a3356bc5bbdcec1c8d873218261349f", 0xd7}, {&(0x7f0000000900)}, {&(0x7f0000000fc0)="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", 0xa00}], 0x6}, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000c80), 0x0}, 0x20) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126"}, 0xc) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x23, 0x82, 0x0, 0xd00d2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x9302, 0xffffffffffffffff, 0x3, 0x0, 0x40, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0xf4240}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x110}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3.619928626s ago: executing program 1 (id=3394): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x81, 0xfffffffffffffffa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x87004, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100000000, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb070018000000000020004800000048000000"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000003c0)=0x40000004) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) 3.019801417s ago: executing program 3 (id=3399): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000608b00"/28], 0x50) io_setup(0x23f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sctp\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r5}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x8005) read(r2, &(0x7f0000001180)=""/4096, 0x1000) socket(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="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"], 0x0, 0x83, 0x0, 0x1, 0x800002}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0xce1) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x8, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYRESHEX=r4], 0x25, 0x370, &(0x7f0000000b80)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000002060108000034e4000000000000000008000100060000000900020073797a320000000012000300686173683a6e65742c706f7274000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) 2.426036717s ago: executing program 6 (id=3400): ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000040a030000000000000000000a00000a0900010073797a3100000000090003"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) r5 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x9, 0x101, 0x7fff, 0x8, 0x2, 0x357322d9}, 0x0, &(0x7f0000000240)={0x9, 0x8, 0x1, 0x80000000, 0xffffffff, 0x3, 0x8, 0x7fff}, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x4, 0x0) socket$kcm(0x22, 0xa, 0x21) 1.540994551s ago: executing program 6 (id=3403): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000300)='e\xd3l\x1eH&\xb5=\xdevH%\xfa\xbf\xef\xeb\x8e1w\xfd\xea\xaaS\x1f\xdbL\x144\x00\x00\x00\x00') 1.436287567s ago: executing program 6 (id=3404): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x800000, 0x6, 0x2, 0xcb, 0x2, 0x0, 0x76, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) 1.268226166s ago: executing program 3 (id=3405): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x300, 0x0, 0x4001}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = signalfd(r0, &(0x7f0000000080)={[0x40]}, 0x8) sendmsg$AUDIT_USER_AVC(r4, 0x0, 0x4) 1.171826091s ago: executing program 5 (id=3406): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 1.084171635s ago: executing program 5 (id=3407): unshare(0x24020400) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, &(0x7f0000001340)={'trans=unix,', {[{@noxattr}, {@aname={'aname', 0x3d, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff}, 0x2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0xfe, 0x3}, 0x2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES64=r4, @ANYBLOB="a5fdad8800000000280012800b00010067656e657665000018000280060005004e200000040006000500080000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) 897.909165ms ago: executing program 3 (id=3410): unshare(0x24020400) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, &(0x7f0000001340)={'trans=unix,', {[{@noxattr}, {@aname={'aname', 0x3d, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x8, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x29, 0x0, 0x6, 0x7c, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r2, 0x0, 0x0, 0x3, 0xe, 0xd, @private2, @loopback, 0x40, 0x1, 0xfffffffc}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x8, 0x4a0202) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r4 = socket$inet6(0xa, 0x400000000001, 0x100) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r5, &(0x7f0000000140)=""/227, 0xe3, 0x10120, &(0x7f0000000100)={0xa, 0x4e23, 0xc, @loopback, 0x2005}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000480)={&(0x7f00001f3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/143, 0x8f, 0x0, &(0x7f0000000380)=""/240, 0xf0}, &(0x7f00000004c0)=0x40) 757.327002ms ago: executing program 3 (id=3412): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1286, &(0x7f0000000900)="$eJzs3U1rY1UcB+B/2nT6MrapOo7OgHjQjSLEaReu3BSZAbGgVDugru7YVEPTF5pQyCBOXbkS/BiiLt0J4hfoxo1rQRDpxuUsxCttUm2StpPapgV5nk0O557fOef23AZuuIe7+9qXqyvL9fJy1oihQiGKGyNRfJgixVAMR8t2vHT351+efee999+cm5+/vZDSnbl3Z15NKU0998MHn3z7/I+Nq3e/m/p+NHamh3b/mP115/rOjd2/volqPVXraW29kbJ0b329kd2rVdJStb5STuntWiWrV1J1rV7Z7Di+XFvf2GimbG1pcmJjs1Kvp2ytmVYqzdQopMZmM2UfZdW1VC6X0+REcBaLXz/M8zwiz0fiSuR5no/HRFyNx2IypqIU0/F4PBFPxrV4Kq7H0/FM3NhvddnzBgAAAAAAAAAAAAAAAAAAgP+XR+z/L9j/DwAAAAAAAAAAAAAAAAAAAIPXvf+/GOH9/wAAAAAAAAAAAAAAAAAAAHDBHvH+/679/y/b/w8AAAAAAAAAAAAAAAAAAACDMNb6WEhpLGL1863FrcXWZ6t+bjmqUYtK3IpS/Bn7u/9bWuU7b8zfvpX2Tccrqw/a+Qdbi8Od+ZmRUkwXjszPjEdESqkzPxoTh/OzUYprR48/2xq/Kz8WL76wl/+slS9HKX76MNajFksRhfbZ7+c/nUnp9bfmxzvzN/faHWt4wMsCAAAA56mc/tF7/77dbnTk8dah9v15arcsnPD7QNf9eTFuFi/rrDlQb95fyWq1yuZ/LFw5vp8rZ+u5p1CIiCwO10xN/LawN3if/Rxcbuc0n0OF4fPu8MTCyMltzrCmUez7j9nnVPtfnfbkt7tr8lLEaUf//atDNWOnjp+tMNS+zLLadt8XW2zn+UAn1vPPON68vzJ6Uur474zCgL+TuDj/LvplzwQAAAAAAAAAAIDTOPLpv/GI6Hke8OOemoPHwzvjvT0fP/oXF3CGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dc7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KsAAAD//1IOydo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) mkdir(&(0x7f0000000380)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/mem_sleep', 0x80080, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000119000/0x3000)=nil, 0x3000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'sit0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$vga_arbiter(r5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) readahead(r1, 0x5, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000080200000100010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7664054fc00daeb935d472c3c2930000000001000000003ba1d9dc00"], 0x50) ftruncate(r2, 0x5) 632.088538ms ago: executing program 1 (id=3413): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x12000, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback={0x3e}, 0xbf}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(0x0, 0xffffffffffffffff, 0x2, r5, 0x1) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x10a004, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@block_validity}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3f86dd6100272400183aff00000000000000000000ff03000000000000000000220000000000000900000082009078040004000000000000000000000000000000000000ff6bef77b5008e395174246bfff394d5575a313463c1569e87a5f6c44e33be2e66fa96283c8a48e379ac8fe037158030f92b0f9f2ca1729123acdc06d7d077923b8425421eed567c773ff0eac626b6e220baed9e106a17b4b741"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740), 0x40000000000024c, 0x40, 0x0) socket(0xa, 0x3, 0xff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r2, @ANYBLOB="0100000a0001007770616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x40) 546.028793ms ago: executing program 6 (id=3414): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000940)="2f0000001e005f0214fffffffffffff8070000001d00000000000000080009000d000f0000002a5fda7874ea41c181", 0x2f) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) pipe(&(0x7f00000001c0)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf25060000003c00018014000200767863616e31000000000000000000001400020073797a6b616c6c657231000000000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="0c000180080003000500000040000180080003000300007fbcfd75649de694001400020076657468305f746f5f6873720000000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x200c0000}, 0x4810) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x20f6b1, 0x3180, 0x20000003, 0x60024e}, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40880, 0x120) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000500)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x12, 0x1}) io_uring_enter(r6, 0xd44, 0x44c1, 0x7, 0x0, 0x0) syz_usb_connect(0x500, 0x24, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 0s ago: executing program 5 (id=3415): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x33, 0x2000051b) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fdff1800000047f56d6a"], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESTOP(r5, 0x40101287, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000280)="047009000000", 0x0, 0x0, 0x30520cf7f25f0c74, 0x0, 0x0}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8007, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pread64(r6, 0x0, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) r9 = accept4$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x800) connect$inet(r9, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): [T12497] total_inactive_anon 4050944 [ 355.526450][T12497] total_active_anon 1196032 [ 355.539159][T12497] total_inactive_file 0 [ 355.543357][T12497] total_active_file 4096 [ 355.547889][T12497] total_unevictable 0 [ 355.567774][T12497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2775,pid=12495,uid=0 [ 355.615377][T12497] Memory cgroup out of memory: Killed process 12497 (syz.5.2775) total-vm:100580kB, anon-rss:6176kB, file-rss:26420kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 355.715655][T12540] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2790'. [ 356.050105][T12563] netlink: 'syz.5.2798': attribute type 1 has an invalid length. [ 356.081496][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 356.081517][ T28] audit: type=1326 audit(1773939928.813:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.2799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbaa3d4c799 code=0x0 [ 356.124171][T12567] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 356.137295][T12567] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 356.167989][T12563] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2798'. [ 356.179479][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2798'. [ 356.189466][T12563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 356.202945][T12563] macvlan3: entered promiscuous mode [ 356.208425][T12563] macvlan3: entered allmulticast mode [ 356.214825][T12563] bond3: entered promiscuous mode [ 356.221209][T12563] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 356.236369][T12563] bond3: left promiscuous mode [ 356.261312][T12571] netlink: 'syz.3.2800': attribute type 1 has an invalid length. [ 356.304905][T12571] bond19: (slave vxcan7): The slave device specified does not support setting the MAC address [ 356.307919][ T28] audit: type=1400 audit(1773939929.044:1893): avc: denied { mount } for pid=12573 comm="syz.1.2801" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 356.318279][T12571] bond19: (slave vxcan7): Error -95 calling set_mac_address [ 356.346385][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2800'. [ 356.360715][T12577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2800'. [ 356.371234][T12577] 8021q: adding VLAN 0 to HW filter on device bond19 [ 356.385526][T12577] macvlan2: entered promiscuous mode [ 356.391373][T12577] macvlan2: entered allmulticast mode [ 356.398137][T12577] bond19: entered promiscuous mode [ 356.403931][T12577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 356.418607][T12577] bond19: left promiscuous mode [ 356.488906][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'. [ 356.573846][T12595] bond20: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 356.588173][T12595] bond20 (unregistering): Released all slaves [ 356.647343][T12600] 9p: Bad value for 'rfdno' [ 356.663887][T12600] bond10: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 356.675656][T12600] bond10 (unregistering): Released all slaves [ 356.699418][T12602] lo speed is unknown, defaulting to 1000 [ 357.048375][T12619] lo speed is unknown, defaulting to 1000 [ 357.343780][T12630] loop5: detected capacity change from 0 to 128 [ 357.465076][T12632] bond9: entered promiscuous mode [ 357.483478][T12632] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.774593][ T28] audit: type=1400 audit(1773939930.577:1894): avc: denied { ioctl } for pid=12641 comm="syz.4.2821" path="socket:[30623]" dev="sockfs" ino=30623 ioctlcmd=0x5405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 357.845930][T12649] netlink: 'syz.4.2823': attribute type 3 has an invalid length. [ 357.896368][ T28] audit: type=1400 audit(1773939930.724:1895): avc: denied { cpu } for pid=12647 comm="syz.4.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 358.246044][T12652] __nla_validate_parse: 5 callbacks suppressed [ 358.246062][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 359.245689][T12674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2829'. [ 359.598984][T12685] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2832'. [ 359.650057][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2833'. [ 359.689738][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2833'. [ 359.909070][T12691] netlink: 'syz.4.2834': attribute type 15 has an invalid length. [ 359.979139][T12691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12691 comm=syz.4.2834 [ 360.072422][T12700] netlink: 'syz.3.2837': attribute type 1 has an invalid length. [ 360.076986][T12691] netlink: 'syz.4.2834': attribute type 15 has an invalid length. [ 360.124921][T12702] 9pnet_virtio: no channels available for device 127.0.0.1 [ 360.165634][T12703] bond20: (slave vxcan7): The slave device specified does not support setting the MAC address [ 360.179259][T12703] bond20: (slave vxcan7): Error -95 calling set_mac_address [ 360.209921][T12700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2837'. [ 360.267227][T12700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2837'. [ 360.283448][ T28] audit: type=1326 audit(1773939933.212:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.0.2839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbaa3d4c799 code=0x0 [ 360.321576][T12700] 8021q: adding VLAN 0 to HW filter on device bond20 [ 360.360639][T12700] macvlan2: entered promiscuous mode [ 360.374851][T12700] macvlan2: entered allmulticast mode [ 360.398400][T12700] bond20: entered promiscuous mode [ 360.421220][T12700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 360.446518][T12700] bond20: left promiscuous mode [ 360.774200][T12712] lo speed is unknown, defaulting to 1000 [ 360.931178][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2843'. [ 361.665351][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2843'. [ 361.881610][T12735] netlink: 'syz.5.2849': attribute type 29 has an invalid length. [ 362.042418][T12736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2850'. [ 362.071341][T12738] lo speed is unknown, defaulting to 1000 [ 362.739543][T12742] bond10: peer notification delay (2048) is not a multiple of miimon (100), value rounded to 2000 ms [ 362.762119][T12742] 8021q: adding VLAN 0 to HW filter on device bond10 [ 362.794096][T12739] lo speed is unknown, defaulting to 1000 [ 362.832230][T12764] bridge0: port 1(ipvlan2) entered blocking state [ 362.844133][T12768] netlink: 'syz.4.2859': attribute type 1 has an invalid length. [ 362.852713][T12764] bridge0: port 1(ipvlan2) entered disabled state [ 362.860051][T12759] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 362.870270][T12759] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 362.881294][T12764] ipvlan2: entered allmulticast mode [ 362.887522][T12764] bridge0: entered allmulticast mode [ 362.903379][T12764] ipvlan2: left allmulticast mode [ 362.914459][T12764] bridge0: left allmulticast mode [ 362.970152][T12771] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 363.124146][T12771] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 363.173347][T12781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2859'. [ 363.225900][T12781] 8021q: adding VLAN 0 to HW filter on device bond10 [ 363.264471][T12768] macvlan2: entered promiscuous mode [ 363.289661][T12768] macvlan2: entered allmulticast mode [ 363.304499][T12768] bond10: entered promiscuous mode [ 363.378771][T12768] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 363.397131][T12768] bond10: left promiscuous mode [ 364.141299][T12808] lo: entered allmulticast mode [ 364.151415][T12808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.220652][T12811] tipc: Resetting bearer [ 364.229826][T12816] netlink: 'syz.3.2869': attribute type 15 has an invalid length. [ 364.247402][T12816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12816 comm=syz.3.2869 [ 364.325633][T12816] netlink: 'syz.3.2869': attribute type 15 has an invalid length. [ 364.364890][ T28] audit: type=1400 audit(1773939937.506:1897): avc: denied { write } for pid=12821 comm="syz.0.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 366.013768][T12849] netlink: 'syz.0.2881': attribute type 1 has an invalid length. [ 366.069173][T12849] bond11: entered promiscuous mode [ 366.086139][T12849] 8021q: adding VLAN 0 to HW filter on device bond11 [ 366.111570][T12853] 8021q: adding VLAN 0 to HW filter on device bond11 [ 366.128007][T12853] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 366.445985][T12853] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 366.484216][T12853] bond11: (slave vti0): making interface the new active one [ 366.516012][T12853] vti0: entered promiscuous mode [ 366.563478][T12853] bond11: (slave vti0): Enslaving as an active interface with an up link [ 366.616975][T12858] batman_adv: batadv0: Interface deactivated: dummy0 [ 366.930711][T12867] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 366.979397][ T3406] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 367.083940][ T7707] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 367.322340][ T23] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 367.349927][T12889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2892'. [ 367.447264][T12902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2897'. [ 367.646082][T12920] netlink: 'syz.1.2901': attribute type 15 has an invalid length. [ 367.658637][T12920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12920 comm=syz.1.2901 [ 368.065209][ T124] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 368.077559][ T124] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 368.349180][T12949] syz.5.2908 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 368.455542][T12949] CPU: 1 UID: 0 PID: 12949 Comm: syz.5.2908 Not tainted syzkaller #0 PREEMPT(full) [ 368.455591][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.455604][T12949] Call Trace: [ 368.455644][T12949] [ 368.455651][T12949] __dump_stack+0x1d/0x30 [ 368.455682][T12949] dump_stack_lvl+0x95/0xd0 [ 368.455769][T12949] dump_stack+0x15/0x1b [ 368.455795][T12949] dump_header+0x80/0x240 [ 368.455822][T12949] oom_kill_process+0x295/0x350 [ 368.455846][T12949] out_of_memory+0x97d/0xb80 [ 368.455869][T12949] try_charge_memcg+0x62e/0xa10 [ 368.455984][T12949] __mem_cgroup_charge+0x65/0x150 [ 368.456042][T12949] do_wp_page+0xf84/0x2590 [ 368.456120][T12949] ? __rcu_read_lock+0x36/0x50 [ 368.456149][T12949] handle_mm_fault+0x8cb/0x3020 [ 368.456184][T12949] ? mt_find+0x291/0x3d0 [ 368.456274][T12949] do_user_addr_fault+0x3fd/0x1050 [ 368.456316][T12949] exc_page_fault+0x62/0xa0 [ 368.456354][T12949] asm_exc_page_fault+0x26/0x30 [ 368.456445][T12949] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 368.456497][T12949] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 19 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 368.456519][T12949] RSP: 0018:ffffc90002267868 EFLAGS: 00050206 [ 368.456542][T12949] RAX: ffff888136a28ac8 RBX: ffff88810cf10000 RCX: 0000000000006e80 [ 368.456560][T12949] RDX: 0000000000000000 RSI: ffff88810cf11180 RDI: 0000200000432000 [ 368.456577][T12949] RBP: 0000200000430e80 R08: 0000000000000109 R09: 0000000000000000 [ 368.456608][T12949] R10: 000188810cf10000 R11: 000188810cf17fff R12: 0000200000438e80 [ 368.456623][T12949] R13: ffffc90002267e70 R14: 0000000000008000 R15: 00007ffffffff000 [ 368.456643][T12949] _copy_to_iter+0x141/0xea0 [ 368.456673][T12949] ? _raw_spin_unlock+0x9/0x30 [ 368.456734][T12949] ? finish_task_switch+0x7d/0x280 [ 368.456760][T12949] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 368.456797][T12949] __skb_datagram_iter+0x2f4/0x680 [ 368.456897][T12949] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 368.456940][T12949] skb_copy_datagram_iter+0x3f/0x120 [ 368.456979][T12949] unix_stream_read_actor+0x43/0x70 [ 368.457016][T12949] unix_stream_read_generic+0x6e9/0x1630 [ 368.457051][T12949] ? __pfx_autoremove_wake_function+0x10/0x10 [ 368.457091][T12949] unix_stream_recvmsg+0xff/0x130 [ 368.457116][T12949] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 368.457200][T12949] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 368.457228][T12949] sock_recvmsg+0xf5/0x120 [ 368.457256][T12949] ____sys_recvmsg+0xf5/0x280 [ 368.457292][T12949] ___sys_recvmsg+0x11f/0x3b0 [ 368.457391][T12949] __x64_sys_recvmsg+0xd1/0x160 [ 368.457437][T12949] x64_sys_call+0x2b1a/0x3020 [ 368.457470][T12949] do_syscall_64+0x12c/0x370 [ 368.457563][T12949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.457584][T12949] RIP: 0033:0x7fbb3dc0c799 [ 368.457600][T12949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.457620][T12949] RSP: 002b:00007fbb3c625028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 368.457726][T12949] RAX: ffffffffffffffda RBX: 00007fbb3de86180 RCX: 00007fbb3dc0c799 [ 368.457744][T12949] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000005 [ 368.457759][T12949] RBP: 00007fbb3dca2c99 R08: 0000000000000000 R09: 0000000000000000 [ 368.457820][T12949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.457834][T12949] R13: 00007fbb3de86218 R14: 00007fbb3de86180 R15: 00007ffe27ba3118 [ 368.457856][T12949] [ 368.457896][T12949] memory: usage 253900kB, limit 307200kB, failcnt 867 [ 368.572794][T12955] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2906'. [ 368.732708][T12949] memory+swap: usage 190976kB, limit 9007199254740988kB, failcnt 0 [ 368.737102][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 368.760633][T12949] kmem: usage 95512kB, limit 9007199254740988kB, failcnt 0 [ 368.789323][ T28] audit: type=1400 audit(1773939942.135:1898): avc: denied { cmd } for pid=12953 comm="syz.4.2910" path="socket:[31199]" dev="sockfs" ino=31199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 368.798381][T12949] Memory cgroup stats for [ 368.868091][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 368.915380][T12949] /syz5: [ 368.915677][T12949] cache 77848576 [ 368.923653][T12949] rss 4771840 [ 368.927198][T12949] shmem 77848576 [ 368.931147][T12949] mapped_file 0 [ 368.935267][T12949] dirty 0 [ 368.938492][T12949] writeback 0 [ 368.942354][T12949] workingset_refault_anon 0 [ 368.947820][T12949] workingset_refault_file 1792 [ 368.959744][T12949] swap 0 [ 368.967324][T12949] swapcached 0 [ 368.976226][T12949] pgpgin 100768 [ 368.980173][T12949] pgpgout 80596 [ 368.984093][T12949] pgfault 79551 [ 368.988094][T12949] pgmajfault 5 [ 368.992595][T12949] inactive_anon 78200832 [ 368.996224][ T3406] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 368.997433][T12963] netlink: 'syz.3.2912': attribute type 1 has an invalid length. [ 369.015275][T12949] active_anon 4419584 [ 369.019925][T12949] inactive_file 0 [ 369.023809][T12949] active_file 4096 [ 369.028516][T12949] unevictable 0 [ 369.032132][T12949] hierarchical_memory_limit 314572800 [ 369.033864][T12963] bond21: (slave vxcan7): The slave device specified does not support setting the MAC address [ 369.037858][T12949] hierarchical_memsw_limit 9223372036854771712 [ 369.049047][T12963] bond21: (slave vxcan7): Error -95 calling set_mac_address [ 369.055567][T12949] total_cache 77848576 [ 369.069787][T12949] total_rss 4771840 [ 369.073686][T12949] total_shmem 77848576 [ 369.077991][T12949] total_mapped_file 0 [ 369.078701][T12965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2912'. [ 369.082094][T12949] total_dirty 0 [ 369.082106][T12949] total_writeback 0 [ 369.093614][T12965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2912'. [ 369.095134][T12949] total_workingset_refault_anon 0 [ 369.099879][T12965] 8021q: adding VLAN 0 to HW filter on device bond21 [ 369.108765][T12949] total_workingset_refault_file 1792 [ 369.127026][T12949] total_swap 0 [ 369.128077][T12963] macvlan2: entered promiscuous mode [ 369.130705][T12949] total_swapcached 0 [ 369.130718][T12949] total_pgpgin 100768 [ 369.130728][T12949] total_pgpgout 80596 [ 369.136681][T12963] macvlan2: entered allmulticast mode [ 369.140477][T12949] total_pgfault 79551 [ 369.145389][T12963] bond21: entered promiscuous mode [ 369.149047][T12949] total_pgmajfault 5 [ 369.155186][T12963] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 369.159212][T12949] total_inactive_anon 78200832 [ 369.180414][T12949] total_active_anon 4419584 [ 369.186195][T12949] total_inactive_file 0 [ 369.190833][T12949] total_active_file 4096 [ 369.191010][T12963] bond21: left promiscuous mode [ 369.195459][T12949] total_unevictable 0 [ 369.195472][T12949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2508,pid=11493,uid=0 [ 369.219911][T12949] Memory cgroup out of memory: Killed process 11493 (syz.5.2508) total-vm:94032kB, anon-rss:1404kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 369.602767][T12979] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2917'. [ 369.650956][T12982] bond11: ARP target 9.0.0.0 is already present [ 369.657942][T12982] bond11: option arp_ip_target: invalid value (9) [ 369.674311][T12982] bond11 (unregistering): Released all slaves [ 369.910096][T12985] lo speed is unknown, defaulting to 1000 [ 370.008789][T12985] chnl_net:caif_netlink_parms(): no params data found [ 370.065157][ T28] audit: type=1326 audit(1773939943.490:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.094829][ T28] audit: type=1326 audit(1773939943.490:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.123754][ T28] audit: type=1326 audit(1773939943.500:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.150663][ T28] audit: type=1326 audit(1773939943.500:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.181981][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.196340][ T28] audit: type=1326 audit(1773939943.500:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.206740][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.221270][ T28] audit: type=1326 audit(1773939943.500:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.252632][ T28] audit: type=1326 audit(1773939943.500:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.277208][ T28] audit: type=1326 audit(1773939943.500:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.279021][T12985] bridge_slave_0: entered allmulticast mode [ 370.301936][ T28] audit: type=1326 audit(1773939943.500:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.326576][T12985] bridge_slave_0: entered promiscuous mode [ 370.332992][ T28] audit: type=1326 audit(1773939943.500:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.3.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7facd23ec799 code=0x7ffc0000 [ 370.364433][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.371983][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.380017][T12985] bridge_slave_1: entered allmulticast mode [ 370.386838][T12985] bridge_slave_1: entered promiscuous mode [ 370.407805][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.419748][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.444236][T12985] team0: Port device team_slave_0 added [ 370.451412][T12985] team0: Port device team_slave_1 added [ 370.469607][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.477078][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.505590][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.517180][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.524464][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.559958][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.624533][T12985] hsr_slave_0: entered promiscuous mode [ 370.637035][T12985] hsr_slave_1: entered promiscuous mode [ 370.643841][T12985] debugfs: 'hsr0' already exists in 'hsr' [ 370.650509][T12985] Cannot create hsr debugfs directory [ 371.644124][ T3406] page_pool_release_retry() stalled pool shutdown: id 41, 1 inflight 122 sec [ 371.799464][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 372.131407][T13058] netlink: 'syz.4.2937': attribute type 15 has an invalid length. [ 372.220480][T13061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13061 comm=syz.4.2937 [ 372.246193][ T7711] bond11 (unregistering): (slave vti0): Releasing backup interface [ 372.286943][ T7711] vti0 (unregistering): left promiscuous mode [ 372.335356][ T7711] bond2 (unregistering): (slave gretap1): Releasing active interface [ 372.406239][ T7711] bond2 (unregistering): (slave bridge0): Releasing active interface [ 372.505096][ T7711] bond3 (unregistering): (slave bridge2): Releasing active interface [ 372.562384][ T7711] bond4 (unregistering): (slave bridge3): Releasing active interface [ 372.715628][ T7711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.725366][ T7711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.735737][ T7711] bond0 (unregistering): Released all slaves [ 372.744384][ T7711] bond1 (unregistering): Released all slaves [ 372.753651][ T7711] bond2 (unregistering): Released all slaves [ 372.763277][ T7711] bond3 (unregistering): Released all slaves [ 372.772675][ T7711] bond4 (unregistering): Released all slaves [ 372.781881][ T7711] bond5 (unregistering): Released all slaves [ 372.791622][ T7711] bond6 (unregistering): Released all slaves [ 372.800905][ T7711] bond7 (unregistering): Released all slaves [ 372.810573][ T7711] bond8 (unregistering): Released all slaves [ 372.819749][ T7711] bond9 (unregistering): Released all slaves [ 372.829216][ T7711] bond10 (unregistering): Released all slaves [ 372.838898][ T7711] bond11 (unregistering): Released all slaves [ 372.852881][T13061] netlink: 'syz.4.2937': attribute type 15 has an invalid length. [ 372.886542][T12985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 372.905664][ T7711] macvlan0: left promiscuous mode [ 372.912258][ T7711] dummy0: left promiscuous mode [ 373.140614][ T7711] team0 (unregistering): Port device team_slave_1 removed [ 373.153363][ T7711] team0 (unregistering): Port device team_slave_0 removed [ 373.229584][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'. [ 373.317501][T12985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.393192][T12985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.608377][T12985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.984396][ T7711] IPVS: stop unused estimator thread 0... [ 374.029158][T12985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.055545][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.076275][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.084179][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.133060][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.140844][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.209860][T12985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.234165][T12985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.384964][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.611742][T12985] veth0_vlan: entered promiscuous mode [ 374.642702][T12985] veth1_vlan: entered promiscuous mode [ 374.680863][T12985] veth0_macvtap: entered promiscuous mode [ 374.697347][T12985] veth1_macvtap: entered promiscuous mode [ 374.736640][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.769579][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.805669][ T7711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.832277][ T7711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.883245][ T7711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.940352][ T7711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.960290][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 374.960310][ T28] audit: type=1400 audit(1773939948.634:1919): avc: denied { mount } for pid=12985 comm="syz-executor" name="/" dev="gadgetfs" ino=32847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 375.689161][T13143] ip6t_srh: unknown srh match flags 4000 [ 375.689707][ T28] audit: type=1400 audit(1773939949.400:1920): avc: denied { create } for pid=13142 comm="syz.0.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 375.843674][T13149] loop0: detected capacity change from 0 to 512 [ 375.886024][T13151] netlink: 'syz.4.2956': attribute type 1 has an invalid length. [ 375.896746][T13149] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2955: inode has both inline data and extents flags [ 376.009388][T13149] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 376.009545][T13149] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2955: couldn't read orphan inode 15 (err -117) [ 376.019276][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 376.019299][ C0] EXT4-fs (loop0): initial error at time 1773939949: ext4_orphan_get:1391: inode 15 [ 376.019329][ C0] EXT4-fs (loop0): last error at time 1773939949: ext4_orphan_get:1391: inode 15 [ 376.066914][T13149] loop0: lost filesystem error report for type 5 error -117 [ 376.070794][T13149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.146765][T13149] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 376.157608][ T28] audit: type=1400 audit(1773939949.883:1921): avc: denied { setattr } for pid=13147 comm="syz.0.2955" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.210522][T13161] syzkaller1: entered promiscuous mode [ 376.216105][T13161] syzkaller1: entered allmulticast mode [ 376.246104][ T28] audit: type=1400 audit(1773939949.967:1922): avc: denied { write } for pid=13147 comm="syz.0.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 376.299229][T13146] syz.5.2954 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 376.314241][T13146] CPU: 1 UID: 0 PID: 13146 Comm: syz.5.2954 Not tainted syzkaller #0 PREEMPT(full) [ 376.314274][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.314289][T13146] Call Trace: [ 376.314296][T13146] [ 376.314380][T13146] __dump_stack+0x1d/0x30 [ 376.314413][T13146] dump_stack_lvl+0x95/0xd0 [ 376.314442][T13146] dump_stack+0x15/0x1b [ 376.314469][T13146] dump_header+0x80/0x240 [ 376.314495][T13146] oom_kill_process+0x295/0x350 [ 376.314617][T13146] out_of_memory+0x97d/0xb80 [ 376.314643][T13146] try_charge_memcg+0x62e/0xa10 [ 376.314691][T13146] obj_cgroup_charge_pages+0x23/0xc0 [ 376.314760][T13146] __memcg_kmem_charge_page+0x9e/0x170 [ 376.314788][T13146] __alloc_frozen_pages_noprof+0x18a/0x360 [ 376.314849][T13146] alloc_pages_mpol+0xb3/0x260 [ 376.314878][T13146] alloc_pages_noprof+0x8f/0x130 [ 376.314957][T13146] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 376.315094][T13146] __kvmalloc_node_noprof+0x3d4/0x650 [ 376.315120][T13146] ? ip_set_alloc+0x24/0x30 [ 376.315147][T13146] ? ip_set_alloc+0x24/0x30 [ 376.315178][T13146] ? __kmalloc_cache_noprof+0x18a/0x410 [ 376.315289][T13146] ip_set_alloc+0x24/0x30 [ 376.315361][T13146] hash_netiface_create+0x282/0x740 [ 376.315389][T13146] ? __pfx_hash_netiface_create+0x10/0x10 [ 376.315533][T13146] ip_set_create+0x3cf/0x970 [ 376.315572][T13146] ? __nla_parse+0x40/0x60 [ 376.315600][T13146] nfnetlink_rcv_msg+0x509/0x5d0 [ 376.315653][T13146] netlink_rcv_skb+0x123/0x220 [ 376.315735][T13146] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 376.315770][T13146] nfnetlink_rcv+0x167/0x1720 [ 376.315812][T13146] ? page_counter_charge+0x207/0x230 [ 376.315847][T13146] ? __rcu_read_unlock+0x4e/0x70 [ 376.315907][T13146] ? __rcu_read_unlock+0x4e/0x70 [ 376.315950][T13146] ? ___perf_sw_event+0x2e3/0x320 [ 376.315980][T13146] ? __memcg_kmem_charge_page+0xd0/0x170 [ 376.316044][T13146] ? mas_next_slot+0x69b/0x6f0 [ 376.316076][T13146] ? __rcu_read_unlock+0x4e/0x70 [ 376.316102][T13146] ? mt_find+0x291/0x3d0 [ 376.316209][T13146] ? cmp_ex_search+0x25/0x40 [ 376.316240][T13146] ? bsearch+0x95/0xc0 [ 376.316264][T13146] ? _raw_spin_lock_bh+0x56/0xb0 [ 376.316291][T13146] ? _raw_spin_unlock_bh+0x18/0x20 [ 376.316392][T13146] ? selinux_nlmsg_lookup+0x99/0x890 [ 376.316433][T13146] ? __rcu_read_unlock+0x33/0x70 [ 376.316512][T13146] ? __netlink_lookup+0x276/0x2b0 [ 376.316545][T13146] netlink_unicast+0x5c0/0x690 [ 376.316630][T13146] netlink_sendmsg+0x5c8/0x6f0 [ 376.316664][T13146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.316700][T13146] ____sys_sendmsg+0x563/0x5b0 [ 376.316801][T13146] ___sys_sendmsg+0x195/0x1e0 [ 376.316996][T13146] __x64_sys_sendmsg+0xd4/0x160 [ 376.317083][T13146] x64_sys_call+0x194c/0x3020 [ 376.317115][T13146] do_syscall_64+0x12c/0x370 [ 376.317146][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.317174][T13146] RIP: 0033:0x7fbb3dc0c799 [ 376.317237][T13146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.317256][T13146] RSP: 002b:00007fbb3c667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.317278][T13146] RAX: ffffffffffffffda RBX: 00007fbb3de85fa0 RCX: 00007fbb3dc0c799 [ 376.317292][T13146] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 376.317454][T13146] RBP: 00007fbb3dca2c99 R08: 0000000000000000 R09: 0000000000000000 [ 376.317471][T13146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.317487][T13146] R13: 00007fbb3de86038 R14: 00007fbb3de85fa0 R15: 00007ffe27ba3118 [ 376.317509][T13146] [ 376.317552][T13146] memory: usage 307200kB, limit 307200kB, failcnt 1187 [ 376.890591][T13146] memory+swap: usage 334940kB, limit 9007199254740988kB, failcnt 0 [ 376.943870][T13146] kmem: usage 255280kB, limit 9007199254740988kB, failcnt 0 [ 376.975014][T13146] Memory cgroup stats for /syz5: [ 376.976063][T13146] cache 49389568 [ 377.050330][T13175] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2958'. [ 377.868875][T13146] rss 3661824 [ 377.886076][T13146] shmem 49389568 [ 377.898726][T13146] mapped_file 0 [ 377.907424][T13146] dirty 0 [ 377.963325][T13146] writeback 0 [ 377.966872][T13146] workingset_refault_anon 0 [ 377.971543][T13146] workingset_refault_file 1792 [ 378.084758][T13146] swap 28459008 [ 378.092551][T13146] swapcached 28459008 [ 378.098760][T13146] pgpgin 111295 [ 378.106645][T13146] pgpgout 98342 [ 378.113650][T13146] pgfault 97816 [ 378.122405][T13146] pgmajfault 5 [ 378.132491][T13146] inactive_anon 53018624 [ 378.145339][T13146] active_anon 32768 [ 378.153856][T13146] inactive_file 0 [ 378.162258][T13146] active_file 4096 [ 378.166076][T13146] unevictable 0 [ 378.179785][T13146] hierarchical_memory_limit 314572800 [ 378.185700][T13146] hierarchical_memsw_limit 9223372036854771712 [ 378.207665][T13146] total_cache 49389568 [ 378.217531][T13146] total_rss 3661824 [ 378.222321][T13146] total_shmem 49389568 [ 378.226655][T13146] total_mapped_file 0 [ 378.240727][T13146] total_dirty 0 [ 378.244291][T13146] total_writeback 0 [ 378.257704][T13146] total_workingset_refault_anon 0 [ 378.267122][T13146] total_workingset_refault_file 1792 [ 378.282774][T13146] total_swap 28459008 [ 378.287104][T13146] total_swapcached 28459008 [ 378.291705][T13146] total_pgpgin 111295 [ 378.305581][T13146] total_pgpgout 98342 [ 378.309594][T13146] total_pgfault 97816 [ 378.313628][T13146] total_pgmajfault 5 [ 378.333891][T13146] total_inactive_anon 53018624 [ 378.339238][T13146] total_active_anon 32768 [ 378.352792][T13146] total_inactive_file 0 [ 378.358443][T13146] total_active_file 4096 [ 378.367211][T13146] total_unevictable 0 [ 378.377004][T13146] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2954,pid=13145,uid=0 [ 378.410114][T13146] Memory cgroup out of memory: Killed process 13146 (syz.5.2954) total-vm:102768kB, anon-rss:4796kB, file-rss:30476kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 378.677469][ T28] audit: type=1326 audit(1773939952.539:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.4.2963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd4d8dc799 code=0x0 [ 378.716315][T13185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=13185 comm=syz.1.2962 [ 378.785885][T13186] atomic_op ffff888103b4e928 conn xmit_atomic 0000000000000000 [ 379.267073][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 380.475013][ T28] audit: type=1400 audit(1773939954.387:1924): avc: denied { sys_module } for pid=13200 comm="syz.1.2968" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 380.601988][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 380.623247][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 381.488850][T12985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.019547][T13246] netlink: 'syz.5.2981': attribute type 2 has an invalid length. [ 382.695354][T13258] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13258 comm=syz.5.2984 [ 382.770842][ T28] audit: type=1400 audit(1773939956.833:1925): avc: denied { setopt } for pid=13263 comm="syz.0.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.820275][ T28] audit: type=1400 audit(1773939956.864:1926): avc: denied { getopt } for pid=13263 comm="syz.0.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.936169][T13273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13273 comm=syz.1.2985 [ 383.057865][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.065823][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.147702][T13274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.160515][T13274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.335792][ T7711] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.380688][ T7711] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.508391][ T7711] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.521430][ T7711] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.591230][T13285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=13285 comm=syz.5.2992 [ 384.155650][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'. [ 384.180596][T13316] netlink: 'syz.1.3003': attribute type 18 has an invalid length. [ 384.205054][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 384.575301][T13326] loop0: detected capacity change from 0 to 2048 [ 384.603194][T13326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.748343][ T28] audit: type=1400 audit(1773939958.911:1927): avc: denied { shutdown } for pid=13344 comm="syz.5.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.071279][T13357] IPVS: Error connecting to the multicast addr [ 385.707555][T13319] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 385.767256][T12985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.868334][T13386] loop0: detected capacity change from 0 to 512 [ 385.878280][T13386] EXT4-fs: old and new quota format mixing [ 385.887487][ T28] audit: type=1400 audit(1773939960.097:1928): avc: denied { setopt } for pid=13383 comm="syz.0.3023" lport=52154 faddr=::ffff:172.30.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 385.946982][T13386] lo: entered promiscuous mode [ 385.952361][T13386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.991098][T13386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3023'. [ 386.947991][T13403] chnl_net:caif_netlink_parms(): no params data found [ 387.144623][T13403] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.160662][T13403] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.190832][T13403] bridge_slave_0: entered allmulticast mode [ 387.214903][T13403] bridge_slave_0: entered promiscuous mode [ 387.245182][T13403] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.273356][T13403] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.310134][T13403] bridge_slave_1: entered allmulticast mode [ 387.339216][T13403] bridge_slave_1: entered promiscuous mode [ 387.401945][T13403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.435937][T13403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.474996][T13403] team0: Port device team_slave_0 added [ 387.492771][T13403] team0: Port device team_slave_1 added [ 387.522155][T13403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.535349][T13403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.592914][T13403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.633819][T13403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.650016][T13403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.697821][T13403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.750028][T13403] hsr_slave_0: entered promiscuous mode [ 387.757063][T13403] hsr_slave_1: entered promiscuous mode [ 387.763273][T13403] debugfs: 'hsr0' already exists in 'hsr' [ 387.769325][T13403] Cannot create hsr debugfs directory [ 388.039963][T13403] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.062630][T13403] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.079015][T13403] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.099929][T13403] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.294214][T13403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.350746][T13403] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.370338][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.377914][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.415872][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.423170][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.610858][T13403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.648641][T13453] macvlan0: entered promiscuous mode [ 388.654721][T13453] dummy0: entered promiscuous mode [ 388.660225][T13453] debugfs: 'hsr1' already exists in 'hsr' [ 388.666600][T13453] Cannot create hsr debugfs directory [ 388.673961][T13453] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 388.735839][T13453] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 388.746346][T13453] hsr1: entered promiscuous mode [ 388.761368][T13453] hsr1: entered allmulticast mode [ 388.849941][T13453] macvlan0: entered allmulticast mode [ 388.866156][T13453] dummy0: entered allmulticast mode [ 389.409611][T13468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13468 comm=syz.5.3039 [ 389.848322][T13462] team0 (unregistering): Port device team_slave_0 removed [ 389.857086][T13462] team0 (unregistering): Port device team_slave_1 removed [ 389.871593][T13466] netlink: 'syz.5.3039': attribute type 15 has an invalid length. [ 389.886327][T13468] netlink: 'syz.5.3039': attribute type 15 has an invalid length. [ 389.910659][T13403] veth0_vlan: entered promiscuous mode [ 389.929718][T13403] veth1_vlan: entered promiscuous mode [ 389.957609][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 389.967251][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 389.977111][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 390.000541][T13403] veth0_macvtap: entered promiscuous mode [ 390.021773][T13403] veth1_macvtap: entered promiscuous mode [ 390.051103][T13403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.067794][T13478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3042'. [ 390.077518][T13403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.104434][ T28] audit: type=1400 audit(1773939964.528:1929): avc: denied { ioctl } for pid=13479 comm="syz.0.3043" path="socket:[33392]" dev="sockfs" ino=33392 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 390.151770][T13480] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 390.161663][ T28] audit: type=1400 audit(1773939964.580:1930): avc: denied { create } for pid=13479 comm="syz.0.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.175186][T13480] loop0: detected capacity change from 0 to 512 [ 390.203525][T13480] EXT4-fs (loop0): failed to initialize system zone (-117) [ 390.211280][T13480] EXT4-fs (loop0): mount failed [ 390.218484][T13478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13478 comm=syz.4.3042 [ 390.234806][ T28] audit: type=1400 audit(1773939964.580:1931): avc: denied { relabelfrom } for pid=13479 comm="syz.0.3043" name="LLC" dev="sockfs" ino=33392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 390.265721][T13480] SELinux: policydb version 808464403 does not match my version range 15-35 [ 390.274909][T13480] SELinux: failed to load policy [ 390.290894][ T28] audit: type=1400 audit(1773939964.591:1932): avc: denied { relabelto } for pid=13479 comm="syz.0.3043" name="LLC" dev="sockfs" ino=33392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=llc_socket permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 390.327078][ T28] audit: type=1400 audit(1773939964.696:1933): avc: denied { load_policy } for pid=13479 comm="syz.0.3043" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 390.348726][ T7711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.359012][ T7711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.378367][ T7711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.387356][ T7711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.441121][ T28] audit: type=1400 audit(1773939964.864:1934): avc: denied { getopt } for pid=13483 comm="syz.0.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 390.470787][T13485] tipc: Failed to obtain node identity [ 390.478940][T13485] tipc: Enabling of bearer rejected, failed to enable media [ 390.508982][T13485] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3044'. [ 390.789924][T13499] loop0: detected capacity change from 0 to 1024 [ 390.800147][T13499] EXT4-fs: inline encryption not supported [ 390.806404][T13499] EXT4-fs: Ignoring removed i_version option [ 390.833162][T13499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.847762][ T28] audit: type=1400 audit(1773939965.304:1935): avc: denied { read write open } for pid=13498 comm="syz.0.3047" path="/19/file1/file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 390.929259][ T28] audit: type=1400 audit(1773939965.336:1936): avc: denied { write } for pid=13498 comm="syz.0.3047" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.081337][T12985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.205821][T13512] 9pnet_fd: p9_fd_create_unix (13512): problem connecting socket: ./file0: -111 [ 391.383600][T13520] netlink: 'syz.3.3054': attribute type 1 has an invalid length. [ 391.445322][T13521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3054'. [ 391.493711][T13523] loop3: detected capacity change from 0 to 2048 [ 391.540327][T13523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.583462][ T28] audit: type=1400 audit(1773939966.081:1937): avc: denied { create } for pid=13522 comm="syz.3.3055" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 391.606022][T13528] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3056'. [ 391.630592][ T28] audit: type=1400 audit(1773939966.081:1938): avc: denied { add_name } for pid=13522 comm="syz.3.3055" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 391.684043][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.749120][ T28] audit: type=1400 audit(1773939966.081:1939): avc: denied { append } for pid=13522 comm="syz.3.3055" path="/2/file0/bus/memory.events" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 391.904588][ T28] audit: type=1400 audit(1773939966.417:1940): avc: denied { create } for pid=13533 comm="syz.3.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 391.909910][T13535] loop3: detected capacity change from 0 to 1764 [ 391.932174][T13535] iso9660: Unknown parameter 'de' [ 391.939210][ T28] audit: type=1400 audit(1773939966.417:1941): avc: denied { ioctl } for pid=13533 comm="syz.3.3057" path="socket:[33474]" dev="sockfs" ino=33474 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 392.041730][ T28] audit: type=1400 audit(1773939966.554:1942): avc: denied { bind } for pid=13533 comm="syz.3.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 392.065743][T13539] loop0: detected capacity change from 0 to 1024 [ 392.075027][T13539] EXT4-fs: inline encryption not supported [ 392.101600][T13543] loop3: detected capacity change from 0 to 764 [ 392.113845][ T28] audit: type=1400 audit(1773939966.638:1943): avc: denied { mount } for pid=13541 comm="syz.3.3060" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 392.125254][T13539] EXT4-fs: Ignoring removed i_version option [ 392.159744][ T28] audit: type=1400 audit(1773939966.638:1944): avc: denied { unmount } for pid=13403 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 392.189843][T13539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.224300][T13546] 9pnet_fd: p9_fd_create_unix (13546): problem connecting socket: ./file0: -111 [ 392.313252][T13553] netlink: 'syz.1.3065': attribute type 1 has an invalid length. [ 392.323280][T13547] loop3: detected capacity change from 0 to 512 [ 392.436073][T13557] bond10: (slave vxcan7): The slave device specified does not support setting the MAC address [ 392.436530][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3065'. [ 392.463380][T13557] bond10: (slave vxcan7): Error -95 calling set_mac_address [ 392.479792][T13553] 8021q: adding VLAN 0 to HW filter on device bond10 [ 392.509310][T13547] ------------[ cut here ]------------ [ 392.515401][T13547] EA inode 11 i_nlink=2 [ 392.515516][T13547] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.3062/13547 [ 392.516691][T13553] macvlan4: entered promiscuous mode [ 392.521531][T13547] Modules linked in: [ 392.545588][T13547] CPU: 1 UID: 0 PID: 13547 Comm: syz.3.3062 Not tainted syzkaller #0 PREEMPT(full) [ 392.554898][T13553] macvlan4: entered allmulticast mode [ 392.556057][T13547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.562191][T13553] bond10: entered promiscuous mode [ 392.571404][T13547] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 392.578750][T13553] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 392.585019][T13547] Code: 74 46 99 ff 4c 8d 2d ed ac 5d 05 49 8d 7e 40 e8 14 e0 b5 ff 49 8b 6e 40 4c 89 e7 e8 48 db b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 6f 87 dd 03 66 66 66 66 66 66 2e [ 392.612782][T13547] RSP: 0018:ffffc9000f31b778 EFLAGS: 00010246 [ 392.619583][T13547] RAX: ffff888104040ac8 RBX: ffff88811acd5788 RCX: ffffffff81c01828 [ 392.628127][T13547] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc500 [ 392.637452][T13547] RBP: 000000000000000b R08: 000188811acd573b R09: 0000000000000000 [ 392.646027][T13547] R10: ffffc9000f31b6a8 R11: 0001c9000f31b6a8 R12: ffff88811acd5738 [ 392.654742][T13547] R13: ffffffff871dc500 R14: ffff88811acd56f0 R15: 0000000000000001 [ 392.663363][T13547] FS: 00007f880674f6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 392.673549][T13547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.681213][T13547] CR2: 0000000034747865 CR3: 0000000121d6c000 CR4: 00000000003506f0 [ 392.690283][T13547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.698582][T13547] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 392.707027][T13547] Call Trace: [ 392.710876][T13547] [ 392.714228][T13547] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 392.721236][T13547] ? errseq_check+0x2c/0x50 [ 392.726185][T13547] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 392.733243][T13547] ? ext4_truncate+0x92b/0xb00 [ 392.738901][T13547] ext4_evict_inode+0xa1f/0xd60 [ 392.744578][T13547] ? __pfx_ext4_evict_inode+0x10/0x10 [ 392.751399][T13547] evict+0x2af/0x510 [ 392.758495][T13547] ? __dquot_initialize+0x146/0x7c0 [ 392.764487][T13547] iput+0x41a/0x580 [ 392.769077][T13547] ext4_process_orphan+0x1a9/0x1c0 [ 392.774974][T13547] ext4_orphan_cleanup+0x6a8/0xa00 [ 392.780622][T13547] ext4_fill_super+0x3408/0x37c0 [ 392.786081][T13547] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 392.793474][T13547] ? setup_bdev_super+0x30e/0x370 [ 392.798931][T13547] ? __pfx_ext4_fill_super+0x10/0x10 [ 392.804788][T13547] get_tree_bdev_flags+0x291/0x300 [ 392.810495][T13547] ? __pfx_ext4_fill_super+0x10/0x10 [ 392.816211][T13547] get_tree_bdev+0x1f/0x30 [ 392.821087][T13547] ext4_get_tree+0x1c/0x30 [ 392.826078][T13547] vfs_get_tree+0x57/0x1d0 [ 392.831041][T13547] do_new_mount+0x288/0x8d0 [ 392.836519][T13547] path_mount+0x4d0/0xbc0 [ 392.841929][T13547] __se_sys_mount+0x28c/0x2e0 [ 392.847273][T13547] __x64_sys_mount+0x67/0x80 [ 392.852723][T13547] x64_sys_call+0x2d61/0x3020 [ 392.859000][T13547] do_syscall_64+0x12c/0x370 [ 392.864933][T13547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.871508][T13547] RIP: 0033:0x7f8807cfda0a [ 392.876574][T13547] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.899102][T13547] RSP: 002b:00007f880674ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.908885][T13547] RAX: ffffffffffffffda RBX: 00007f880674eee0 RCX: 00007f8807cfda0a [ 392.917753][T13547] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f880674eea0 [ 392.926946][T13547] RBP: 00002000000009c0 R08: 00007f880674eee0 R09: 0000000000800718 [ 392.935872][T13547] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 392.945283][T13547] R13: 00007f880674eea0 R14: 000000000000048d R15: 0000200000000200 [ 392.954638][T13547] [ 392.958703][T13547] ---[ end trace 0000000000000000 ]--- [ 392.969587][T13547] EXT4-fs (loop3): 1 orphan inode deleted [ 392.977171][T13553] bond10: left promiscuous mode [ 393.006156][T13547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.023512][T12985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.279681][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.289126][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 393.399155][T13586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3074'. [ 393.917903][T13592] dummy0: entered promiscuous mode [ 393.924322][T13592] team0: Device macvtap1 failed to register rx_handler [ 393.943460][T13592] dummy0: left promiscuous mode [ 394.376724][T13624] tipc: Invalid UDP bearer configuration [ 394.376742][T13624] tipc: Enabling of bearer rejected, failed to enable media [ 394.536696][T13631] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x12 [ 395.441614][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3097'. [ 395.579059][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3100'. [ 395.610654][T13643] loop0: detected capacity change from 0 to 512 [ 395.696990][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 395.718534][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3100'. [ 395.730800][T13653] netlink: 'syz.5.3100': attribute type 30 has an invalid length. [ 395.735253][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 395.742525][T13643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.763030][T13643] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.780204][ T124] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.782356][T13643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.789277][ T124] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.789321][ T124] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.789456][ T124] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.799734][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 395.799752][ T28] audit: type=1400 audit(1773939970.501:1950): avc: denied { connect } for pid=13672 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.799783][ T28] audit: type=1400 audit(1773939970.511:1951): avc: denied { read } for pid=13672 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.978380][T13676] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.985991][T13676] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.061506][T13676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.090378][T13676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.277698][ T7707] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.311170][ T7707] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.377432][ T7707] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.423082][ T7707] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.877002][T13690] loop3: detected capacity change from 0 to 512 [ 396.893602][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3115'. [ 396.913867][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3115'. [ 397.132885][ T28] audit: type=1400 audit(1773939971.897:1952): avc: denied { listen } for pid=13716 comm="syz.5.3117" path=2F3134372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 397.172987][T13690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.245019][T13690] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.288309][T13690] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.338323][T13701] chnl_net:caif_netlink_parms(): no params data found [ 397.431782][T13721] loop0: detected capacity change from 0 to 512 [ 397.530824][T13701] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.534496][T13736] 9pnet_fd: p9_fd_create_unix (13736): problem connecting socket: ./file0: -111 [ 397.552691][T13701] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.560965][T13701] bridge_slave_0: entered allmulticast mode [ 397.567972][T13701] bridge_slave_0: entered promiscuous mode [ 397.576028][ T124] veth3: left allmulticast mode [ 397.581062][ T124] veth3: left promiscuous mode [ 397.586256][ T124] bridge3: port 1(veth3) entered disabled state [ 397.605107][ T124] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 397.638824][ T124] bond3 (unregistering): (slave gretap1): Releasing active interface [ 397.663468][ T124] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 397.701727][ T124] bond2 (unregistering): (slave bridge2): Releasing active interface [ 397.756644][ T28] audit: type=1400 audit(1773939972.559:1953): avc: denied { setattr } for pid=13750 comm="syz.4.3127" name="RAW" dev="sockfs" ino=36019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.872035][ T124] bond4 (unregistering): (slave bridge4): Releasing active interface [ 397.922338][ T124] bond5 (unregistering): (slave bridge5): Releasing active interface [ 398.080595][T13770] 9pnet_fd: p9_fd_create_unix (13770): problem connecting socket: ./file0: -111 [ 398.206896][ T124] bond0 (unregistering): Released all slaves [ 398.215098][ T124] bond1 (unregistering): Released all slaves [ 398.238957][ T124] bond2 (unregistering): Released all slaves [ 398.258254][ T124] bond3 (unregistering): Released all slaves [ 398.275717][ T124] bond4 (unregistering): Released all slaves [ 398.294801][ T124] bond5 (unregistering): Released all slaves [ 398.295193][T13776] loop3: detected capacity change from 0 to 512 [ 398.320775][ T124] bond6 (unregistering): Released all slaves [ 398.322241][T13776] EXT4-fs: Ignoring removed nobh option [ 398.335986][ T124] bond7 (unregistering): Released all slaves [ 398.357649][ T124] bond8 (unregistering): Released all slaves [ 398.368238][T13776] EXT4-fs (loop3): orphan cleanup on readonly fs [ 398.389631][ T124] bond9 (unregistering): Released all slaves [ 398.398707][ T124] bond10 (unregistering): Released all slaves [ 398.410422][T13701] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.418879][T13776] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3136: EA inode hash validation failed [ 398.434492][T13701] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.442214][T13701] bridge_slave_1: entered allmulticast mode [ 398.454854][T13701] bridge_slave_1: entered promiscuous mode [ 398.462285][T13776] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 398.480996][ T124] tipc: Disabling bearer [ 398.491957][T13776] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3136: corrupted inode contents [ 398.506026][ T124] tipc: Left network mode [ 398.525464][T13776] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 398.527706][T13776] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.3136: mark_inode_dirty error [ 398.528011][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 398.528093][ C0] EXT4-fs (loop3): initial error at time 1773939973: ext4_do_update_inode:5569: inode 15 [ 398.528632][ C0] EXT4-fs (loop3): last error at time 1773939973: ext4_do_update_inode:5569: inode 15 [ 398.535970][T13701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.550931][T13776] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 398.577930][T13789] netlink: 'syz.5.3137': attribute type 15 has an invalid length. [ 398.587545][T13776] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3136: corrupted inode contents [ 398.624028][T13776] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 398.624217][ T124] hsr_slave_0: left promiscuous mode [ 398.640451][T13776] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3136: mark_inode_dirty error [ 398.656331][ T124] hsr_slave_1: left promiscuous mode [ 398.670383][T13776] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 398.673301][T13776] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.3136: mark inode dirty (error -117) [ 398.701175][T13776] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 398.702776][T13776] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 398.730233][ T124] pimreg3 (unregistering): left allmulticast mode [ 398.750152][T13776] EXT4-fs (loop3): 1 orphan inode deleted [ 398.785494][T13776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 398.861058][T13701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.871860][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.889170][T13789] netlink: 'syz.5.3137': attribute type 15 has an invalid length. [ 398.911568][T13701] team0: Port device team_slave_0 added [ 398.920102][T13701] team0: Port device team_slave_1 added [ 398.937289][T13701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.944624][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.024797][T13701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.071429][T13701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.087946][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.122657][T13701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.138676][ T28] audit: type=1400 audit(1773939974.018:1954): avc: denied { nlmsg_write } for pid=13807 comm="syz.4.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 399.178936][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3142'. [ 399.209592][T13701] hsr_slave_0: entered promiscuous mode [ 399.218151][T13701] hsr_slave_1: entered promiscuous mode [ 399.245640][T13701] debugfs: 'hsr0' already exists in 'hsr' [ 399.258212][T13701] Cannot create hsr debugfs directory [ 399.392417][ T124] IPVS: stop unused estimator thread 0... [ 400.999464][T13841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3143'. [ 401.002372][T13701] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.029307][T13701] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.040742][T13701] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.050231][T13701] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.088440][T13852] loop0: detected capacity change from 0 to 8192 [ 401.116313][T13701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.145566][T13701] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.175239][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.182752][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.251654][T13701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.266017][T13869] netlink: 'syz.4.3146': attribute type 1 has an invalid length. [ 401.282941][T13701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.295482][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.302693][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.400184][T13874] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 401.439565][T13874] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 401.451644][T13869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3146'. [ 401.465714][T13869] 8021q: adding VLAN 0 to HW filter on device bond11 [ 401.489337][T13869] macvlan2: entered promiscuous mode [ 401.495287][T13869] macvlan2: entered allmulticast mode [ 401.519492][T13869] bond11: entered promiscuous mode [ 401.533541][T13885] loop0: detected capacity change from 0 to 1024 [ 401.540707][T13885] EXT4-fs: inline encryption not supported [ 401.546794][T13885] EXT4-fs: Ignoring removed i_version option [ 401.553336][T13869] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.572535][T13869] bond11: left promiscuous mode [ 401.573039][T13885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.608262][T13701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.738417][T13701] veth0_vlan: entered promiscuous mode [ 401.776883][T13701] veth1_vlan: entered promiscuous mode [ 401.792390][T13701] veth0_macvtap: entered promiscuous mode [ 401.800664][T13701] veth1_macvtap: entered promiscuous mode [ 401.831810][T13701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.848667][T12985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.849561][T13701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.896136][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.910206][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.927793][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.948570][T13922] netlink: 68 bytes leftover after parsing attributes in process `{#'@)'. [ 401.959602][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.986104][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3155'. [ 402.006015][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3155'. [ 402.164213][T13952] netlink: 'syz.3.3159': attribute type 1 has an invalid length. [ 402.282261][T13952] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 402.295415][T13961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3159'. [ 402.310510][T13952] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 402.378097][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3159'. [ 402.682485][T13968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.775433][T13970] macvlan2: entered promiscuous mode [ 402.821709][T13970] macvlan2: entered allmulticast mode [ 402.843991][T13970] bond1: entered promiscuous mode [ 402.864056][T13970] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.889344][T13970] bond1: left promiscuous mode [ 402.995303][T13985] loop1: detected capacity change from 0 to 1024 [ 403.129463][T13989] loop3: detected capacity change from 0 to 1024 [ 403.144656][ T28] audit: type=1400 audit(1773939978.196:1955): avc: denied { lock } for pid=13988 comm="syz.3.3167" path="socket:[35097]" dev="sockfs" ino=35097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 403.169543][T13989] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.3167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 403.187795][T13989] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 403.191663][T13989] EXT4-fs (loop3): get root inode failed [ 403.200931][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 403.200952][ C1] EXT4-fs (loop3): initial error at time 1773939978: ext4_ext_check_inode:521: inode 2 [ 403.200981][ C1] EXT4-fs (loop3): last error at time 1773939978: ext4_ext_check_inode:521: inode 2 [ 403.214587][T13985] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 403.223839][T13989] EXT4-fs (loop3): mount failed [ 403.266130][T13958] chnl_net:caif_netlink_parms(): no params data found [ 403.291088][T13985] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 403.310101][T13985] EXT4-fs (loop1): orphan cleanup on readonly fs [ 403.317173][T13985] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.3166: Freeing blocks not in datazone - block = 0, count = 4096 [ 403.348212][T13985] loop1: lost filesystem error report for type 5 error -117 [ 403.367134][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 403.381465][ C1] EXT4-fs (loop1): initial error at time 1773939978: ext4_free_blocks:6724 [ 403.390222][ C1] EXT4-fs (loop1): last error at time 1773939978: ext4_free_blocks:6724 [ 403.414052][T13985] EXT4-fs (loop1): Remounting filesystem read-only [ 403.422363][T14002] loop0: detected capacity change from 0 to 512 [ 403.439085][ T28] audit: type=1400 audit(1773939978.521:1956): avc: denied { connect } for pid=14005 comm="syz.3.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 403.459616][T13985] EXT4-fs (loop1): 1 orphan inode deleted [ 403.466363][T14002] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 403.496022][T13985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.520175][T13985] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.522485][T13958] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.537493][T14002] EXT4-fs: error: could not find journal device path [ 403.548187][T13958] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.549314][ T28] audit: type=1400 audit(1773939978.647:1957): avc: denied { associate } for pid=14012 comm="syz.3.3171" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 403.580664][T13958] bridge_slave_0: entered allmulticast mode [ 403.601969][T14013] loop3: detected capacity change from 0 to 1024 [ 403.633796][T13958] bridge_slave_0: entered promiscuous mode [ 403.636764][ T28] audit: type=1400 audit(1773939978.742:1958): avc: denied { write } for pid=13979 comm="syz.0.3165" name="mcfilter6" dev="proc" ino=4026533659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 403.645166][T14011] loop3: detected capacity change from 0 to 512 [ 403.678941][T13958] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.698198][T13958] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.714538][T13958] bridge_slave_1: entered allmulticast mode [ 403.729869][T13958] bridge_slave_1: entered promiscuous mode [ 403.777139][T13958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.815931][T13958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.866921][T13958] team0: Port device team_slave_0 added [ 403.889740][T13958] team0: Port device team_slave_1 added [ 403.966177][T13958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.978402][T14019] Cannot find del_set index 0 as target [ 403.984295][T13958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.015271][T13958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.039829][T13958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.057334][T13958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.088571][T13958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.126478][T14020] ip6gre1: entered promiscuous mode [ 404.136229][ T7707] bridge_slave_1: left allmulticast mode [ 404.142478][ T7707] bridge_slave_1: left promiscuous mode [ 404.158106][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.168139][ T7707] bridge_slave_0: left allmulticast mode [ 404.173918][ T7707] bridge_slave_0: left promiscuous mode [ 404.180318][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.223968][T14011] loop3: detected capacity change from 0 to 1024 [ 404.302380][ T7707] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 404.349979][ T7707] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 404.387962][ T7707] bond3 (unregistering): (slave bridge3): Releasing active interface [ 404.426191][ T7707] bond4 (unregistering): (slave bridge4): Releasing active interface [ 404.447611][T14035] xt_hashlimit: size too large, truncated to 1048576 [ 404.482941][ T7707] bond5 (unregistering): (slave bridge5): Releasing active interface [ 404.505076][T14039] loop0: detected capacity change from 0 to 512 [ 404.536508][T14040] loop1: detected capacity change from 0 to 256 [ 404.559008][ T7707] bond6 (unregistering): (slave bridge6): Releasing active interface [ 404.647746][ T7707] bond0 (unregistering): left promiscuous mode [ 404.655135][ T7707] bond_slave_0: left promiscuous mode [ 404.665248][ T7707] bond_slave_1: left promiscuous mode [ 404.682873][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.692454][ T7707] bond_slave_0: left allmulticast mode [ 404.698556][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.712514][ T7707] bond_slave_1: left allmulticast mode [ 404.718323][ T7707] bond0 (unregistering): Released all slaves [ 404.731778][ T7707] bond1 (unregistering): Released all slaves [ 404.744881][ T7707] bond2 (unregistering): Released all slaves [ 404.759471][ T7707] bond3 (unregistering): Released all slaves [ 404.774703][ T7707] bond4 (unregistering): Released all slaves [ 404.784604][ T7707] bond5 (unregistering): Released all slaves [ 404.794011][ T7707] bond6 (unregistering): Released all slaves [ 404.803043][ T3392] IPVS: starting estimator thread 0... [ 404.803742][ T7707] bond7 (unregistering): Released all slaves [ 404.818088][ T7707] bond8 (unregistering): Released all slaves [ 404.827403][ T7707] bond9 (unregistering): Released all slaves [ 404.836975][ T7707] bond10 (unregistering): Released all slaves [ 404.846212][ T7707] bond11 (unregistering): Released all slaves [ 404.882004][T13958] hsr_slave_0: entered promiscuous mode [ 404.888593][T13958] hsr_slave_1: entered promiscuous mode [ 404.898250][T13958] debugfs: 'hsr0' already exists in 'hsr' [ 404.904552][T13958] Cannot create hsr debugfs directory [ 404.929432][T14042] IPVS: using max 2448 ests per chain, 122400 per kthread [ 404.995238][ T3392] IPVS: starting estimator thread 0... [ 405.042140][ T7707] batadv0: left promiscuous mode [ 405.079151][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.111034][T14047] IPVS: using max 2400 ests per chain, 120000 per kthread [ 405.129019][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.166187][ T7707] batman_adv: batadv0: Removing interface: dummy0 [ 405.378478][ T7707] team0 (unregistering): Port device team_slave_1 removed [ 405.403901][ T7707] team0 (unregistering): Port device team_slave_0 removed [ 405.464077][T14049] EXT4-fs: Ignoring removed nobh option [ 405.505267][T14049] EXT4-fs (loop3): orphan cleanup on readonly fs [ 405.525313][T14049] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3179: EA inode hash validation failed [ 405.561736][T14049] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3179: corrupted inode contents [ 405.584569][T14049] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.586486][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 405.604747][ C0] EXT4-fs (loop3): initial error at time 1773939980: ext4_do_update_inode:5569: inode 15 [ 405.615786][ C0] EXT4-fs (loop3): last error at time 1773939980: ext4_do_update_inode:5569: inode 15 [ 405.629788][T14049] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.3179: mark_inode_dirty error [ 405.647950][T14049] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.665137][T14049] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3179: corrupted inode contents [ 405.692148][T14049] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.700359][T14049] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3179: mark_inode_dirty error [ 405.757264][T14049] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.764049][T14049] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.3179: mark inode dirty (error -117) [ 405.796883][T14049] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.799884][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3180'. [ 405.853084][T14049] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 405.866097][T14049] EXT4-fs (loop3): 1 orphan inode deleted [ 405.898130][T14049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 405.999681][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.019487][T14103] set_capacity_and_notify: 1 callbacks suppressed [ 406.019508][T14103] loop1: detected capacity change from 0 to 512 [ 406.074098][ T7707] IPVS: stop unused estimator thread 0... [ 406.124525][T13958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.188439][T13958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.222138][T13958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.284683][T13958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.471139][T13958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.487408][T13958] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.526976][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.534355][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.561595][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.569092][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.623988][T13958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.682121][T13958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.795261][T14136] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3192'. [ 406.853315][T13958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.928304][T14160] loop1: detected capacity change from 0 to 764 [ 407.113148][T13958] veth0_vlan: entered promiscuous mode [ 407.125868][T13958] veth1_vlan: entered promiscuous mode [ 407.159065][T13958] veth0_macvtap: entered promiscuous mode [ 407.198163][T13958] veth1_macvtap: entered promiscuous mode [ 407.249526][T13958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.289624][T14194] netlink: 'syz.1.3196': attribute type 1 has an invalid length. [ 407.312410][T14194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=14194 comm=syz.1.3196 [ 407.327559][T13958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.359205][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.400072][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.434960][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.481003][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.525740][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 407.561997][T14200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3199'. [ 407.598453][T14209] netlink: 'syz.3.3202': attribute type 15 has an invalid length. [ 407.612515][T14209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14209 comm=syz.3.3202 [ 407.645666][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'. [ 407.681296][T14209] netlink: 'syz.3.3202': attribute type 15 has an invalid length. [ 407.694468][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 407.773456][T14221] loop1: detected capacity change from 0 to 256 [ 408.327108][T14229] loop4: detected capacity change from 0 to 512 [ 408.335979][T14229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 408.373985][T14229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.440601][T14229] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.458011][ T28] audit: type=1400 audit(1773939983.802:1959): avc: denied { write } for pid=14228 comm="syz.4.3210" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 408.500738][ T28] audit: type=1400 audit(1773942543.845:1960): avc: denied { read } for pid=14228 comm="syz.4.3210" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 408.576714][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3213'. [ 408.632002][T14236] netlink: 'syz.5.3213': attribute type 1 has an invalid length. [ 408.659574][T14236] netlink: 'syz.5.3213': attribute type 2 has an invalid length. [ 408.686055][T13958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.755321][T14243] loop0: detected capacity change from 0 to 512 [ 408.799332][T14243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.855027][T14243] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.864872][ T28] audit: type=1326 audit(1773942544.212:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.5.3218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb3dc0c799 code=0x0 [ 408.882924][T14243] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3215'. [ 410.126815][T14276] 9pnet_fd: p9_fd_create_unix (14276): problem connecting socket: ./file0: -111 [ 410.662250][ T28] audit: type=1400 audit(1773942546.113:1962): avc: denied { ioctl } for pid=14292 comm="syz.3.3233" path="socket:[37218]" dev="sockfs" ino=37218 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 410.719055][T14297] netlink: 'syz.1.3234': attribute type 1 has an invalid length. [ 410.736847][ T28] audit: type=1400 audit(1773942546.144:1963): avc: denied { read } for pid=14292 comm="syz.3.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 410.776719][T14303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3234'. [ 410.787151][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3234'. [ 410.800931][T14303] macvlan2: entered promiscuous mode [ 410.806880][T14303] macvlan2: entered allmulticast mode [ 410.876222][T14305] netlink: 'syz.1.3236': attribute type 1 has an invalid length. [ 410.984119][T14310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3236'. [ 410.995501][T14310] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20001 [ 411.073727][T14311] lo: left allmulticast mode [ 411.137461][T14311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.155039][T14311] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.202053][T14311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.300010][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.307840][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.400238][T14322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.415147][T14322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.514250][ T124] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.555263][ T124] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.641557][ T124] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.696109][ T124] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.718958][T14326] netlink: 'syz.3.3240': attribute type 15 has an invalid length. [ 411.822798][T12985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.842153][T14326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14326 comm=syz.3.3240 [ 411.900511][T14326] netlink: 'syz.3.3240': attribute type 15 has an invalid length. [ 412.311143][T14351] loop4: detected capacity change from 0 to 128 [ 412.483241][ T7713] bridge_slave_1: left allmulticast mode [ 412.502133][ T7713] bridge_slave_1: left promiscuous mode [ 413.478754][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.516719][ T7713] bridge_slave_0: left allmulticast mode [ 413.532436][ T28] audit: type=1400 audit(1773942549.126:1964): avc: denied { getopt } for pid=14368 comm="syz.5.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 413.562133][ T7713] bridge_slave_0: left promiscuous mode [ 413.588109][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.685603][ T7713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.695867][T14379] loop1: detected capacity change from 0 to 128 [ 413.721831][ T7713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.745759][ T7713] bond0 (unregistering): Released all slaves [ 413.814717][ T7713] macvlan0: left promiscuous mode [ 413.841633][ T7713] dummy0: left promiscuous mode [ 413.864498][ T28] audit: type=1400 audit(1773942549.472:1965): avc: denied { ioctl } for pid=14383 comm="syz.5.3254" path="socket:[37546]" dev="sockfs" ino=37546 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 413.917674][ T7713] hsr_slave_0: left promiscuous mode [ 413.940713][ T7713] hsr_slave_1: left promiscuous mode [ 413.958820][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.984249][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.348819][T14401] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14401 comm=syz.4.3256 [ 414.818563][T14413] syz.1.3253: attempt to access beyond end of device [ 414.818563][T14413] loop1: rw=2049, sector=145, nr_sectors = 248 limit=128 [ 415.030190][T14418] loop3: detected capacity change from 0 to 256 [ 415.058241][T14418] FAT-fs (loop3): Directory bread(block 64) failed [ 415.065279][T14418] FAT-fs (loop3): Directory bread(block 65) failed [ 415.072394][T14418] FAT-fs (loop3): Directory bread(block 66) failed [ 415.079973][T14418] FAT-fs (loop3): Directory bread(block 67) failed [ 415.086851][T14418] FAT-fs (loop3): Directory bread(block 68) failed [ 415.093680][T14418] FAT-fs (loop3): Directory bread(block 69) failed [ 415.093721][T14418] FAT-fs (loop3): Directory bread(block 70) failed [ 415.093782][T14418] FAT-fs (loop3): Directory bread(block 71) failed [ 415.093810][T14418] FAT-fs (loop3): Directory bread(block 72) failed [ 415.093830][T14418] FAT-fs (loop3): Directory bread(block 73) failed [ 415.144005][ T50] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.144057][ T50] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.144105][ T50] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.144137][ T50] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.358196][T14429] SELinux: policydb version 1976115060 does not match my version range 15-35 [ 415.369445][ T28] audit: type=1400 audit(1773942551.036:1966): avc: denied { load_policy } for pid=14428 comm="syz.3.3263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 415.402458][T14429] SELinux: failed to load policy [ 415.426992][T14429] SELinux: policydb magic number 0xacc19df1 does not match expected magic number 0xf97cff8c [ 415.435540][T14345] chnl_net:caif_netlink_parms(): no params data found [ 415.474543][T14429] SELinux: failed to load policy [ 415.520845][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3266'. [ 415.534691][T14345] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.547034][T14345] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.567275][T14345] bridge_slave_0: entered allmulticast mode [ 415.586561][T14345] bridge_slave_0: entered promiscuous mode [ 415.742992][T14436] loop4: detected capacity change from 0 to 512 [ 415.824972][T14345] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.893974][T14436] EXT4-fs: Ignoring removed nobh option [ 415.940601][T14345] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.989612][T14467] IPVS: ip_vs_add_dest(): server weight less than zero [ 416.019753][T14345] bridge_slave_1: entered allmulticast mode [ 416.047742][T14345] bridge_slave_1: entered promiscuous mode [ 416.100409][T14345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.115365][T14345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.209668][T14436] EXT4-fs (loop4): orphan cleanup on readonly fs [ 416.218640][T14345] team0: Port device team_slave_0 added [ 416.272715][ T28] audit: type=1326 audit(1773942552.002:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.1.3270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32c412c799 code=0x0 [ 416.311242][T14345] team0: Port device team_slave_1 added [ 416.407952][T14436] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3265: EA inode hash validation failed [ 416.431153][T14345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.442962][T14345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.473483][T14436] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3265: corrupted inode contents [ 416.488159][T14345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.500486][T14345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.508527][T14436] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 416.510429][T14436] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.3265: mark_inode_dirty error [ 416.520137][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 416.520336][ C0] EXT4-fs (loop4): initial error at time 1773942552: ext4_do_update_inode:5569: inode 15 [ 416.521100][ C0] EXT4-fs (loop4): last error at time 1773942552: ext4_do_update_inode:5569: inode 15 [ 416.566754][T14345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.594311][T14436] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 416.595956][T14436] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3265: corrupted inode contents [ 416.621298][T14345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.673037][T14436] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 416.681824][T14436] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.3265: mark_inode_dirty error [ 416.696732][T14345] hsr_slave_0: entered promiscuous mode [ 416.717030][T14345] hsr_slave_1: entered promiscuous mode [ 416.724048][T14345] debugfs: 'hsr0' already exists in 'hsr' [ 416.730190][T14345] Cannot create hsr debugfs directory [ 416.736340][T14436] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 416.759952][T14436] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.3265: mark inode dirty (error -117) [ 416.789096][T14436] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 416.790917][T14436] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 416.822586][T14436] EXT4-fs (loop4): 1 orphan inode deleted [ 416.864466][T14436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 416.874809][T14494] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 416.930105][T13958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.028107][T14345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 417.063110][T14501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3276'. [ 417.076429][T14345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 417.122614][T14345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 417.153099][T14345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 417.244282][T14345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.258183][T14501] loop1: detected capacity change from 0 to 8192 [ 417.297978][T14345] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.335758][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.343522][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.362821][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.370220][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.579682][T14345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.754836][T14512] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 417.772843][T14512] FAT-fs (loop1): Filesystem has been set read-only [ 417.815794][T14345] veth0_vlan: entered promiscuous mode [ 417.824826][T14345] veth1_vlan: entered promiscuous mode [ 417.860674][T14345] veth0_macvtap: entered promiscuous mode [ 417.888551][T14538] loop4: detected capacity change from 0 to 512 [ 417.905338][T14345] veth1_macvtap: entered promiscuous mode [ 417.920107][T14538] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 417.956899][T14345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.969996][T14538] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 417.990965][T14345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.027268][T14538] EXT4-fs (loop4): failed to open journal device unknown-block(8,5) -6 [ 418.036284][T14536] loop3: detected capacity change from 0 to 512 [ 418.054256][T14536] EXT4-fs: Ignoring removed nobh option [ 418.074544][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.137143][T14536] EXT4-fs (loop3): orphan cleanup on readonly fs [ 418.170329][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.179577][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.191364][T14536] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3278: EA inode hash validation failed [ 418.199080][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.228293][T14542] loop4: detected capacity change from 0 to 512 [ 418.279336][T14536] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3278: corrupted inode contents [ 418.304972][T14542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.328873][T14536] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 418.331741][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 418.344442][T14542] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.347594][ C1] EXT4-fs (loop3): initial error at time 1773942554: ext4_do_update_inode:5569: inode 15 [ 418.359743][T14542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.368034][ C1] EXT4-fs (loop3): last error at time 1773942554: ext4_do_update_inode:5569: inode 15 [ 418.370597][T14536] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.3278: mark_inode_dirty error [ 418.425791][T14551] loop1: detected capacity change from 0 to 1024 [ 418.429115][T14536] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 418.443150][T14536] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3278: corrupted inode contents [ 418.447445][T14553] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3282'. [ 418.483787][T14536] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 418.485720][T14551] EXT4-fs: inline encryption not supported [ 418.505224][T14536] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3278: mark_inode_dirty error [ 418.530722][T14551] EXT4-fs: Ignoring removed i_version option [ 418.552706][T14536] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 418.569710][T14536] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.3278: mark inode dirty (error -117) [ 418.570013][T14551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.613486][T14536] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 418.648604][T14536] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 418.671121][ T23] kernel read not supported for file [fscontext] (pid: 23 comm: kworker/1:0) [ 418.671159][T14536] EXT4-fs (loop3): 1 orphan inode deleted [ 418.682681][ T28] audit: type=1326 audit(1773942554.532:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.6.3284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019669c799 code=0x0 [ 418.699830][T14536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 418.762856][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.810062][T14563] loop6: detected capacity change from 0 to 128 [ 418.824527][T14563] vfat: Unknown parameter 'ext4' [ 418.951296][T13701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.637143][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3291'. [ 419.695135][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3293'. [ 419.752983][T14591] 9pnet_fd: Insufficient options for proto=fd [ 419.838594][T14598] loop4: detected capacity change from 0 to 1024 [ 419.847600][T14598] EXT4-fs: inline encryption not supported [ 419.855020][T14598] EXT4-fs: Ignoring removed i_version option [ 419.898025][T14598] /dev/loop4: Can't open blockdev [ 420.428304][T14594] loop3: detected capacity change from 0 to 512 [ 420.471324][T14594] EXT4-fs: Ignoring removed nobh option [ 420.652215][T14594] EXT4-fs (loop3): orphan cleanup on readonly fs [ 420.701610][T14594] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3296: EA inode hash validation failed [ 420.723461][T14594] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3296: corrupted inode contents [ 420.749908][T14594] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.3296: mark_inode_dirty error [ 420.762092][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 420.762321][ C0] EXT4-fs (loop3): initial error at time 1773942556: ext4_do_update_inode:5569: inode 15 [ 420.762649][ C0] EXT4-fs (loop3): last error at time 1773942556: ext4_do_update_inode:5569: inode 15 [ 420.795115][T14594] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3296: corrupted inode contents [ 420.810157][T14594] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3296: mark_inode_dirty error [ 420.826609][T14594] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.3296: mark inode dirty (error -117) [ 420.921493][T14594] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 420.977905][T14631] loop6: detected capacity change from 0 to 2048 [ 420.999348][T14594] EXT4-fs (loop3): 1 orphan inode deleted [ 421.005367][T14631] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.061724][T14631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.110464][T14594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 421.144381][T14631] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.208849][ T28] audit: type=1400 audit(1773942557.178:1969): avc: denied { remove_name } for pid=14622 comm="syz.6.3304" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.210898][T14627] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3304: bg 0: block 345: padding at end of block bitmap is not set [ 421.267019][ T28] audit: type=1400 audit(1773942557.178:1970): avc: denied { rename } for pid=14622 comm="syz.6.3304" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 421.356071][ T28] audit: type=1400 audit(1773942557.178:1971): avc: denied { unlink } for pid=14622 comm="syz.6.3304" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 421.381218][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.410196][T14627] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 421.450976][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'. [ 421.464685][T14627] EXT4-fs (loop6): This should not happen!! Data will be lost [ 421.464685][T14627] [ 421.497889][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'. [ 421.739078][T14646] loop3: detected capacity change from 0 to 1024 [ 421.760626][T14646] EXT4-fs: Ignoring removed bh option [ 421.791332][T14646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.818976][T14646] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.888288][T14646] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3310: bg 0: block 112: padding at end of block bitmap is not set [ 422.000017][T14654] EXT4-fs: inline encryption not supported [ 422.016877][T14654] EXT4-fs: Ignoring removed i_version option [ 422.021046][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 422.159610][T14654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.215181][ T28] audit: type=1400 audit(1773942558.238:1972): avc: denied { view } for pid=14667 comm="syz.3.3315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 422.509532][T14672] netlink: 'syz.3.3317': attribute type 1 has an invalid length. [ 422.563058][T13701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.804322][T14682] set_capacity_and_notify: 1 callbacks suppressed [ 422.804345][T14682] loop3: detected capacity change from 0 to 512 [ 422.834196][T14682] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 422.934652][T14682] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 422.954570][T14682] EXT4-fs (loop3): orphan cleanup on readonly fs [ 422.976764][T14682] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 423.000965][ T28] audit: type=1326 audit(1773942559.057:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14691 comm="syz.1.3324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32c412c799 code=0x0 [ 423.031130][T14682] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 423.057875][T14695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3324'. [ 423.071047][T14682] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 423.090172][T14682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3321: bg 0: block 64: padding at end of block bitmap is not set [ 423.142212][T14682] loop3: lost filesystem error report for type 5 error -117 [ 423.142646][T14682] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 423.159140][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 423.159171][ C0] EXT4-fs (loop3): initial error at time 1773942559: ext4_validate_block_bitmap:441 [ 423.159193][ C0] EXT4-fs (loop3): last error at time 1773942559: ext4_validate_block_bitmap:441 [ 423.236663][T14682] loop3: lost filesystem error report for type 5 error -117 [ 423.238281][T14682] EXT4-fs (loop3): 1 truncate cleaned up [ 423.262058][T14682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.324057][T14703] loop1: detected capacity change from 0 to 512 [ 423.333115][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.468472][T14703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.501208][T14703] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.572803][T14345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.645422][T14703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.157746][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3335'. [ 424.191814][T14732] netlink: 'syz.1.3335': attribute type 5 has an invalid length. [ 424.221583][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'. [ 424.272365][T14736] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3337'. [ 424.341589][ T28] audit: type=1400 audit(1773942560.474:1974): avc: denied { watch watch_reads } for pid=14728 comm="syz.5.3336" path="/190/file0" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 424.972810][T14743] netlink: 'syz.4.3340': attribute type 15 has an invalid length. [ 424.992817][T14745] loop6: detected capacity change from 0 to 512 [ 425.006129][T14743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14743 comm=syz.4.3340 [ 425.040446][T14745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.092865][T14745] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.268748][ T28] audit: type=1400 audit(1773942561.450:1975): avc: denied { setattr } for pid=14744 comm="syz.6.3339" name=".log" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 427.036354][T14763] netlink: 'syz.5.3342': attribute type 29 has an invalid length. [ 427.275968][T14768] syzkaller0: entered promiscuous mode [ 427.308597][T14768] syzkaller0: entered allmulticast mode [ 427.540450][ T28] audit: type=1400 audit(1773942563.749:1976): avc: denied { map } for pid=14784 comm="syz.3.3347" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 427.567954][T14782] netlink: 'syz.1.3346': attribute type 4 has an invalid length. [ 427.610110][ T28] audit: type=1400 audit(1773942563.749:1977): avc: denied { execute } for pid=14784 comm="syz.3.3347" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 427.640043][T14345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.716263][T14802] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28692 sclass=netlink_xfrm_socket pid=14802 comm=syz.5.3354 [ 428.089381][T14817] netlink: 'syz.6.3357': attribute type 6 has an invalid length. [ 428.117408][T14816] loop3: detected capacity change from 0 to 1024 [ 428.166102][T14816] EXT4-fs: inline encryption not supported [ 428.261367][T14816] EXT4-fs: Ignoring removed i_version option [ 428.477763][T14816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.810275][T14844] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 429.281638][T14853] loop1: detected capacity change from 0 to 256 [ 429.310971][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.366112][T14853] FAT-fs (loop1): Directory bread(block 1285) failed [ 429.426267][T14853] FAT-fs (loop1): Directory bread(block 1286) failed [ 429.488545][T14853] FAT-fs (loop1): Directory bread(block 1287) failed [ 429.571042][T14853] FAT-fs (loop1): Directory bread(block 1288) failed [ 429.632278][T14878] xt_hashlimit: size too large, truncated to 1048576 [ 429.790734][T14886] FAT-fs (loop1): Directory bread(block 1285) failed [ 429.878871][T14886] FAT-fs (loop1): Directory bread(block 1286) failed [ 429.892184][T14873] loop3: detected capacity change from 0 to 512 [ 430.003299][T14886] FAT-fs (loop1): Directory bread(block 1287) failed [ 430.095679][T14886] FAT-fs (loop1): Directory bread(block 1288) failed [ 430.232349][ T28] audit: type=1400 audit(1773942566.647:1978): avc: denied { mounton } for pid=14872 comm="syz.3.3362" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 431.092262][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3372'. [ 431.143926][T14917] loop3: detected capacity change from 0 to 1024 [ 431.159409][T14918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3371'. [ 431.172618][T14917] EXT4-fs: inline encryption not supported [ 431.218280][T14917] EXT4-fs: Ignoring removed i_version option [ 431.337839][T14917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.582648][T14914] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 431.626074][T14924] FAULT_INJECTION: forcing a failure. [ 431.626074][T14924] name failslab, interval 1, probability 0, space 0, times 0 [ 431.706485][T14924] CPU: 0 UID: 0 PID: 14924 Comm: syz.1.3374 Tainted: G W syzkaller #0 PREEMPT(full) [ 431.706521][T14924] Tainted: [W]=WARN [ 431.706528][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.706540][T14924] Call Trace: [ 431.706546][T14924] [ 431.706555][T14924] __dump_stack+0x1d/0x30 [ 431.706660][T14924] dump_stack_lvl+0x95/0xd0 [ 431.706683][T14924] dump_stack+0x15/0x1b [ 431.706705][T14924] should_fail_ex+0x263/0x280 [ 431.706737][T14924] should_failslab+0x8c/0xb0 [ 431.706788][T14924] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 431.706813][T14924] ? __alloc_skb+0x2d6/0x690 [ 431.706839][T14924] __alloc_skb+0x2d6/0x690 [ 431.706910][T14924] ? __alloc_skb+0x200/0x690 [ 431.706934][T14924] netlink_alloc_large_skb+0xbf/0xf0 [ 431.706967][T14924] netlink_sendmsg+0x40c/0x6f0 [ 431.707003][T14924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.707100][T14924] ____sys_sendmsg+0x563/0x5b0 [ 431.707187][T14924] ___sys_sendmsg+0x195/0x1e0 [ 431.707245][T14924] __x64_sys_sendmsg+0xd4/0x160 [ 431.707286][T14924] x64_sys_call+0x194c/0x3020 [ 431.707319][T14924] do_syscall_64+0x12c/0x370 [ 431.707387][T14924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.707414][T14924] RIP: 0033:0x7f32c412c799 [ 431.707442][T14924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.707460][T14924] RSP: 002b:00007f32c2b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.707506][T14924] RAX: ffffffffffffffda RBX: 00007f32c43a5fa0 RCX: 00007f32c412c799 [ 431.707520][T14924] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 431.707534][T14924] RBP: 00007f32c2b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 431.707547][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.707561][T14924] R13: 00007f32c43a6038 R14: 00007f32c43a5fa0 R15: 00007fff774f0478 [ 431.707589][T14924] [ 431.965611][T14929] netlink: 'syz.6.3376': attribute type 15 has an invalid length. [ 431.993659][T14929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14929 comm=syz.6.3376 [ 432.071681][T14929] netlink: 'syz.6.3376': attribute type 15 has an invalid length. [ 432.164335][T14935] loop1: detected capacity change from 0 to 1024 [ 432.579780][T14935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.738683][T13403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.824837][ T28] audit: type=1400 audit(1773942569.376:1979): avc: denied { create } for pid=14947 comm="syz.3.3379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 432.858809][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3381'. [ 432.901926][ T28] audit: type=1400 audit(1773942569.376:1980): avc: denied { ioctl } for pid=14947 comm="syz.3.3379" path="socket:[39863]" dev="sockfs" ino=39863 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 432.999596][T13701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.116077][T14970] netlink: 'syz.3.3386': attribute type 1 has an invalid length. [ 433.182326][T14970] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 433.316819][T14983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3386'. [ 433.348201][T14970] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 433.413280][T14990] macvlan2: entered promiscuous mode [ 433.420292][T14990] macvlan2: entered allmulticast mode [ 433.432832][T14990] bond2: entered promiscuous mode [ 433.458259][T14990] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 433.496107][T14990] bond2: left promiscuous mode [ 433.523077][T14983] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 434.050982][T15028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 434.461575][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 434.495967][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 434.538319][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 434.902798][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3398'. [ 435.227932][T15090] loop3: detected capacity change from 0 to 256 [ 435.235207][T15090] vfat: Unknown parameter '00000000000000000000001ÿÿÿÿ0x0000000000000006' [ 435.245268][T15090] netlink: 'syz.3.3399': attribute type 1 has an invalid length. [ 435.772036][T15099] hub 8-0:1.0: USB hub found [ 435.798067][T15099] hub 8-0:1.0: 8 ports detected [ 435.833508][T15100] netlink: 'syz.6.3400': attribute type 36 has an invalid length. [ 435.874010][T15100] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 435.925604][T15100] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 436.192072][T15045] infiniband syz1: set down [ 436.197054][ T3406] xfrm0 speed is unknown, defaulting to 1000 [ 436.216207][T15045] infiniband syz1: added xfrm0 [ 436.232803][T15045] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 436.233636][T15045] infiniband syz1: Couldn't open port 1 [ 436.283176][T15045] RDS/IB: syz1: added [ 436.300738][T15045] smc: adding ib device syz1 with port count 1 [ 436.323192][T15045] smc: ib device syz1 port 1 has no pnetid [ 436.342613][ T3406] xfrm0 speed is unknown, defaulting to 1000 [ 436.357456][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 436.502356][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 436.558833][T15110] loop6: detected capacity change from 0 to 512 [ 436.615294][T15110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.678593][T15110] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.700471][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 436.806926][T15114] bridge0: port 3(ipvlan2) entered blocking state [ 436.821478][T15114] bridge0: port 3(ipvlan2) entered disabled state [ 436.828178][T15114] ipvlan2: entered allmulticast mode [ 436.854722][T15114] bridge0: entered allmulticast mode [ 436.879072][T15114] ipvlan2: left allmulticast mode [ 436.897569][T15114] bridge0: left allmulticast mode [ 436.938217][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 436.961847][T15119] 9pnet_fd: p9_fd_create_unix (15119): problem connecting socket: ./file0: -111 [ 437.053566][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 437.090460][ T28] audit: type=1400 audit(1773942573.848:1981): avc: denied { bind } for pid=15123 comm="syz.5.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 437.138756][T15128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 437.161467][T15126] 9pnet_fd: p9_fd_create_unix (15126): problem connecting socket: ./file0: -111 [ 437.205871][T15045] xfrm0 speed is unknown, defaulting to 1000 [ 437.359931][T15132] loop1: detected capacity change from 0 to 1024 [ 437.412010][T15130] loop3: detected capacity change from 0 to 8192 [ 437.453730][T15130] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.486571][T14345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.538298][T15135] netlink: 'syz.6.3414': attribute type 15 has an invalid length. [ 437.577103][T15135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15135 comm=syz.6.3414 [ 437.665442][T15135] netlink: 'syz.6.3414': attribute type 15 has an invalid length. [ 437.777202][T15132] loop1: detected capacity change from 0 to 1024 [ 437.880404][T15132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.923845][ T28] audit: type=1400 audit(1773942574.730:1982): avc: denied { rename } for pid=15131 comm="syz.1.3413" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.947336][ T28] audit: type=1400 audit(1773942574.730:1983): avc: denied { rmdir } for pid=15131 comm="syz.1.3413" name="file1" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.003268][T15137] ================================================================== [ 438.011584][T15137] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 438.018820][T15137] [ 438.021171][T15137] write to 0xffff88811e650fec of 2 bytes by task 15130 on cpu 1: [ 438.028978][T15137] fat16_ent_put+0x28/0x60 [ 438.033502][T15137] fat_alloc_clusters+0x57b/0xc50 [ 438.038722][T15137] fat_get_block+0x258/0x5e0 [ 438.043320][T15137] __block_write_begin_int+0x400/0xf90 [ 438.049021][T15137] cont_write_begin+0x5fe/0x970 [ 438.054153][T15137] fat_write_begin+0x4f/0xe0 [ 438.058843][T15137] cont_write_begin+0x1b0/0x970 [ 438.063728][T15137] fat_write_begin+0x4f/0xe0 [ 438.068330][T15137] generic_cont_expand_simple+0xb0/0x150 [ 438.073976][T15137] fat_cont_expand+0x3e/0x170 [ 438.078658][T15137] fat_setattr+0x2a4/0x870 [ 438.083258][T15137] notify_change+0x872/0x8f0 [ 438.087900][T15137] do_ftruncate+0x349/0x3d0 [ 438.092604][T15137] __x64_sys_ftruncate+0x68/0xc0 [ 438.097654][T15137] x64_sys_call+0x2beb/0x3020 [ 438.102518][T15137] do_syscall_64+0x12c/0x370 [ 438.107295][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.113373][T15137] [ 438.115795][T15137] read to 0xffff88811e650e00 of 512 bytes by task 15137 on cpu 0: [ 438.124520][T15137] fat_mirror_bhs+0x1df/0x320 [ 438.129208][T15137] fat_ent_write+0xd0/0xe0 [ 438.133640][T15137] fat_chain_add+0x16c/0x490 [ 438.138242][T15137] fat_get_block+0x46c/0x5e0 [ 438.143361][T15137] __block_write_begin_int+0x400/0xf90 [ 438.149009][T15137] cont_write_begin+0x5fe/0x970 [ 438.154224][T15137] fat_write_begin+0x4f/0xe0 [ 438.158910][T15137] generic_perform_write+0x183/0x490 [ 438.164383][T15137] __generic_file_write_iter+0x9e/0x120 [ 438.170036][T15137] generic_file_write_iter+0x8d/0x310 [ 438.175603][T15137] vfs_write+0x5a6/0x9f0 [ 438.180123][T15137] ksys_write+0xdc/0x1a0 [ 438.184627][T15137] __x64_sys_write+0x40/0x50 [ 438.189576][T15137] x64_sys_call+0x27e1/0x3020 [ 438.194439][T15137] do_syscall_64+0x12c/0x370 [ 438.199062][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.205226][T15137] [ 438.207817][T15137] Reported by Kernel Concurrency Sanitizer on: [ 438.214323][T15137] CPU: 0 UID: 0 PID: 15137 Comm: syz.3.3412 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.225455][T15137] Tainted: [W]=WARN [ 438.229275][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.239509][T15137] ================================================================== [ 438.280237][T15132] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.3413: Attempting to read directory block (623) that is past i_size (638464) [ 438.368450][T13701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.