last executing test programs: 6m37.517965193s ago: executing program 1 (id=284): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000080)=@ethtool_gfeatures}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x4b, 0x1, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0xda5, 0x2000) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000140)) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x2}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x73, &(0x7f00000002c0)=""/115, 0x40f00, 0x2d, '\x00', r2, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xe}, 0x10, r9, r10, 0x8, 0x0, &(0x7f0000000440)=[{0x4, 0x3, 0x9}, {0x5, 0x1, 0x4, 0x7}, {0x0, 0x2, 0x4, 0x1}, {0x0, 0x1, 0xe}, {0x0, 0x5, 0x10, 0xa}, {0x2, 0x3, 0xd}, {0x3, 0x4, 0x9, 0x7}, {0x3, 0x5, 0x7, 0xb}], 0x10, 0x80000001}, 0x94) syz_clone(0x50201091, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x8000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x40, 0x52, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 6m36.884897924s ago: executing program 1 (id=289): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12662a, 0x10004, 0x20da, 0x5, 0xa, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000480)=""/255, &(0x7f0000000280)=0xff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 6m35.88891905s ago: executing program 1 (id=302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f0000000180)='wireguard\x00', 0x440000, &(0x7f00000001c0)={@align=0x3, {0x5, 0x5, 0x64c, 0xe}}, 0x2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x4, 0x4, 0x6, 0x51b21, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f0000001240)=[{0x0, 0x8c}, {&(0x7f0000001740)="9b5937bbf46a0a", 0x7}], 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x51) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r6) r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x440200) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r7, @ANYBLOB="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"/518], 0x20c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r9) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000000cbcd11be97ca4a93e551e901b764297e0618504cf97af40584305ae4ea1aa1ae2ea9b60197957d3b3eb8c06084fd56cd12f8bd5725209ae1cdb6c99d3be5706b265b8c5f6d4f137f456c440bb86ecc5bff4d71c46682669b7f7accfe27ccbff19ab6dbb6b5c008", @ANYRES16=r10, @ANYBLOB="010029bd7000fedbdf251a0000001000228004000080040000800400008005009200010000000600210062000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x840) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r10, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc00}, 0x4000) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000900)={&(0x7f0000000840)=""/108, 0x1125000, 0x800, 0x9, 0x2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 6m35.489428389s ago: executing program 1 (id=307): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xffffffffffffff58, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00"], 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xf5, 0xf0, 0x14, 0x8ab, 0x2, 0x0, 0x80000001, 0x19a, 0x38, 0x8008b, 0x6, 0x4, 0x20, 0xffffffffffffff87, 0x5, 0x6, 0x20}}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x12, r2, 0x94628000) ioprio_get$pid(0x0, r1) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$inet6(0xa, 0x3, 0x8) recvmmsg(r5, &(0x7f0000000c80), 0x0, 0x40001161, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x24d, &(0x7f00000009c0)="$eJzs3T9oY3UAB/Dve0k8exfl1EUQTkFEtFDOTXA5F4UDPQ4RQYUTERflKtQWt9bJxUFnlU4uRdysjtKluCiCU9UOdRG0OFgcdIgkr5VqU1ubNE99nw+85L3k9+/xft9fQuCRAI11PsmlJK0k00k6SYr9Be6qtvO7h8tT69eSXu+Jn4pBueq4slfvXJKlJA8mWSuLvNROFlaf2fpl49F735zv3PP+6tNTEz3JXdtbm4/tvHfljY8uP7DwxVc/XClyKd0/ndf4FUNeaxfJrafR2b9E0a57BBzH1dc+/Lqf+9uS3D3Ifydlqov31twNa53c/+5hdd/+8cs7JjlWYPx6vU7/M3CpBzROmaSbopxJUu2X5cxM9R3+m9bZ8uXZuVenX5ydv/5C3SsVMC7dZPORT858fO4v+f++VeUf+A874he2fv6fvLrybX9/pzW0yIWbTmVgQN36+Z9+bvG+HJ5/4H9K/qG55B+aS/6hueQfmkv+obnkH5pL/qG55B+aS/6hufbnHwBolt6Zuu9ABupS9/oDAAAAAAAAAAAAAAAAAAActDy1fm1vm1Sfn72TbD+cpD2s/9bg/4iTGwePZ38u+sX+UFTVRvLsnSM2MKIPar77+ubvxtLMiS/D5xfy+FhGcEKL15Ol15NcbLcPzr9id/4donN0+7cc8X7n+X8y2vF76Kl6+/9tpd7+L28kn/bXn4vD1p8ytw+eh68/3eNNgb/1yq8jNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDE/B4AAP//e+xttA==") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 6m34.740297636s ago: executing program 0 (id=312): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12662a, 0x10004, 0x20da, 0x5, 0xa, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000480)=""/255, &(0x7f0000000280)=0xff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 6m34.631479543s ago: executing program 1 (id=314): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702014820000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 6m33.884686111s ago: executing program 0 (id=318): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xdc560000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x280000b, 0x830, r4, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00001b3000/0x4000)=nil, 0x4000, &(0x7f0000000000)='{\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000001c0), 0xb}, 0x0, 0x6, 0x10000, 0x2, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x541200, 0x10c) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffffff, 0x0, 0x11e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20381, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x4, 0x7, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 6m33.723085928s ago: executing program 1 (id=319): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) unshare(0x22020400) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x6004410d}, 0xc024004) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r2 = openat(r1, &(0x7f0000000400)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0xa) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x10, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* f'], 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x4414, &(0x7f0000000340)={0x0, 0x86d0, 0x1, 0x8, 0x28f}) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_nanosleep(0x9, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r6, 0x4b47, &(0x7f00000000c0)=""/110) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010e7c9f456ae37c35710000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000280012800b00010067656e65766500001800028014000700ff010000000000000000000000000001"], 0x48}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 6m33.317705995s ago: executing program 32 (id=319): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) unshare(0x22020400) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x6004410d}, 0xc024004) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r2 = openat(r1, &(0x7f0000000400)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0xa) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x10, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* f'], 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x4414, &(0x7f0000000340)={0x0, 0x86d0, 0x1, 0x8, 0x28f}) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_nanosleep(0x9, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r6, 0x4b47, &(0x7f00000000c0)=""/110) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010e7c9f456ae37c35710000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000280012800b00010067656e65766500001800028014000700ff010000000000000000000000000001"], 0x48}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 6m32.737025156s ago: executing program 0 (id=335): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x0, 0x7, 0x7, 0x2}, {0x8, 0x1, 0x3, 0x5, 0xe595, 0x671}, 0x10001, 0xae35, 0x169}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x908b43c158034cdb}, @TCA_TBF_RATE64={0xc, 0x4, 0x3cb8956c9a0790f9}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0xc010) close(0x3) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r4, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x3, 0x3}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="9cd57918049e9f6bc3f71cf78db8c6fbbc60c3f5dc47c235793f38d51007517bd03208b5b147a63cac2c54656a1b4ed9267d12e5206fd647775573e169ebf14b6f1827c3419f4fd6ebb984f61f5440ed9366f1f51ec8858d355aacb05d8c1c6b4138e51525289e76b25045bb6191848ad909e3d67ba3e55d", 0x78}, {&(0x7f0000000580)="d214a49a432613b5c0f71102c2a1a934194d799932c95f78267cfc012e", 0x1d}], 0x2, &(0x7f0000000640)="75b96d1b760fe6e45a57e6e606fc22b5ec637f0d695f92544a499b76b8b10ad03c65e997cf9af48f27a7ab543b5997f260e1be949ad68a18ee982ce90da5335d5be6d9f3d01c7e9e7720df42e62405c0da81f3681c5a9281b8116e5b7ad10e2dc34cbc61208339b1348544a5f027ab5ea16255e6ff2e4b016f98310fd15a4cc969f53d16294189f3bdd92e285b57c13c34397a328a3bec461f6e714736592c323c000c7893fcf59e3a98ed198ec1dce19aae6be80930bc39571d5ff78127502d73", 0xc1, 0x4000040}, 0x20040000) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x176, &(0x7f0000000300)="$eJzs27GKE1EUBuATk53d1WZrsRiwsQpqZanICuqAoqTQSmG12ZWAaUarPIW1b+ITCWJl5RUzISGaEEKYmbD5viaH/IR7TkLmcov75saH87Ph6P3weRxFdKJ3P/L43YmTuBLdqIwDALhMfqUUP1JK6XAcx1mklNruCACo28L+/9X+DwD7YO3+f6+lxgCA2jj/A8D+efnq9dMHRXH6Is+PIr6Py0E5qF6r/NHj4vR2PnEy/9TPshx0Z/mdKs8X84O4Os3vLs2zuHWzyv9mD58V/+TX4qz+8QEAAGAv9POZpef7fn9VXlUH03f+P9/34nqvkREAgA2NPn0+f3tx8e5jA8XxZMVOs4tuVnxp4WvZ2aIbO9HGdsWTb9Uvuiv91FLUMWBrjySgIfM/fdudAAAAAAAAAAAAAAAAq2x5VSiLiCVRRLbuZsFh46MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzJ8AAAD//7qUQBM=") syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) 6m31.567646277s ago: executing program 0 (id=332): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xffffffffffffff58, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00"], 0x28}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xf5, 0xf0, 0x14, 0x8ab, 0x2, 0x0, 0x80000001, 0x19a, 0x38, 0x8008b, 0x6, 0x4, 0x20, 0xffffffffffffff87, 0x5, 0x6, 0x20}}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x12, r2, 0x94628000) ioprio_get$pid(0x0, r1) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$inet6(0xa, 0x3, 0x8) recvmmsg(r5, &(0x7f0000000c80), 0x0, 0x40001161, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x24d, &(0x7f00000009c0)="$eJzs3T9oY3UAB/Dve0k8exfl1EUQTkFEtFDOTXA5F4UDPQ4RQYUTERflKtQWt9bJxUFnlU4uRdysjtKluCiCU9UOdRG0OFgcdIgkr5VqU1ubNE99nw+85L3k9+/xft9fQuCRAI11PsmlJK0k00k6SYr9Be6qtvO7h8tT69eSXu+Jn4pBueq4slfvXJKlJA8mWSuLvNROFlaf2fpl49F735zv3PP+6tNTEz3JXdtbm4/tvHfljY8uP7DwxVc/XClyKd0/ndf4FUNeaxfJrafR2b9E0a57BBzH1dc+/Lqf+9uS3D3Ifydlqov31twNa53c/+5hdd/+8cs7JjlWYPx6vU7/M3CpBzROmaSbopxJUu2X5cxM9R3+m9bZ8uXZuVenX5ydv/5C3SsVMC7dZPORT858fO4v+f++VeUf+A874he2fv6fvLrybX9/pzW0yIWbTmVgQN36+Z9+bvG+HJ5/4H9K/qG55B+aS/6hueQfmkv+obnkH5pL/qG55B+aS/6hufbnHwBolt6Zuu9ABupS9/oDAAAAAAAAAAAAAAAAAAActDy1fm1vm1Sfn72TbD+cpD2s/9bg/4iTGwePZ38u+sX+UFTVRvLsnSM2MKIPar77+ubvxtLMiS/D5xfy+FhGcEKL15Ol15NcbLcPzr9id/4donN0+7cc8X7n+X8y2vF76Kl6+/9tpd7+L28kn/bXn4vD1p8ytw+eh68/3eNNgb/1yq8jNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDE/B4AAP//e+xttA==") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 6m31.161782324s ago: executing program 0 (id=337): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) setreuid(0xee01, 0xee01) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 6m30.538094137s ago: executing program 0 (id=340): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x9d8, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "901f"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40008d1}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 6m30.484875726s ago: executing program 33 (id=340): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x9d8, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "901f"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40008d1}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 2m19.061520644s ago: executing program 5 (id=2092): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xb, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x5}, 0x9, 0x0, 0x800000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) (async) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") (async, rerun: 32) r0 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1a00048, &(0x7f0000000880)=ANY=[@ANYBLOB='shortname=win95,uni_xlate=0,uni_xlate=0,uni_xlate=1,rodir,uni_xlate=0,shortname=mixed,uni_xlate=0,uni_xlate=1,usefree,shortname=mixed,utf8=0,shortname=winnt,shortname=lower,uni_xlate=1,fowner<', @ANYRESDEC=r1, @ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB=',fowner=', @ANYRESDEC=r1, @ANYBLOB=',obj_user=\'.^,audit,\x00'], 0x3, 0x358, &(0x7f0000000500)="$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") 2m17.590916964s ago: executing program 5 (id=2104): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="700000001000030425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000480012800e00010069703665727370616e0000003400028008000100", @ANYRES32=r2, @ANYBLOB="060011004e23000014000600fc00000000000000000000000000000105001700000000000400120008000a00", @ANYRES32=r5, @ANYBLOB="62b675694dac05000000a2bd7a1c9941bd0501f15361645daedc3ed126d111938793ac67e4fd5285e9d0d94d71496b0c2554d86df36d496b41b13dde18d0133851830ac27523eaaa6b16924d63b61a8c57e6e629070004c70f2d05004da1021d52c41c6d06dfacd2d2e760906e511d00b2801a44250e545983a6646a372a19b0bc8266a688d0ac367d9cdd0af260e1bc6be139beb6ae543a42517c"], 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00250000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB="08000a00da030972f840ca59e13df567610a10610ad108cc3455efe55950de502e5157dda179cf553519826de8cfb2531d4013d54f53dd5921c87e38000074ba0e81ec68f3ca0f84e5476f98602a97eca254b7c021c3ecb12ae34425257fada12d158e566dd732c731346b7660d61aaa06c43de93b52dda43a869dfd08294f8053521a8dbb69fc82", @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) 2m17.154987875s ago: executing program 5 (id=2107): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000100), 0xe}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) geteuid() sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010004000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r10, 0x0, 0x0) 2m16.181507096s ago: executing program 5 (id=2116): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30008c6, &(0x7f0000000080), 0x1, 0x585, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r1 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x101042, 0x194) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x85c, 0x5}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, r2, 0x10001, 0x800, 0x0, 0x1e}) socket(0x11, 0x3, 0x10001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x20a0, 0x2010000, 0x0, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/115, 0xffffffffffffff58) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00"/1284], 0x590) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) ioperm(0x0, 0x7, 0x80006) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m14.449857772s ago: executing program 5 (id=2131): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) timer_create(0x1, &(0x7f0000000780)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0) r2 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000780)="6959b490e5dd91c5275aaabbdfd980f36f79190308bbeece4d4aab09953b673e1c77f42bbdc89a9b684e1839c7651744089b56ac84c57c488af76875e65f40d2e268c3dab8bf124ae61a7dabb40c4fbb0dc15ce50e3f1fbe7847be633d6ac3f5", &(0x7f0000000000)=""/4, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") socket$kcm(0x29, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 2m13.677283074s ago: executing program 5 (id=2139): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRESDEC=0x0, @ANYBLOB="0200"/20, @ANYRES8=r2, @ANYRES32, @ANYRES16=r1], 0x50) ioctl$TIOCGPTPEER(r5, 0x5441, 0x8000000000000001) r6 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x400000, 0xffffffff, 0x1, 0x0, 0x91, "ff00f7000000000000000020af88008300"}) inotify_init1(0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) read(r6, &(0x7f0000000a40)=""/139, 0x8b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe78) 2m13.600341138s ago: executing program 34 (id=2139): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRESDEC=0x0, @ANYBLOB="0200"/20, @ANYRES8=r2, @ANYRES32, @ANYRES16=r1], 0x50) ioctl$TIOCGPTPEER(r5, 0x5441, 0x8000000000000001) r6 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x400000, 0xffffffff, 0x1, 0x0, 0x91, "ff00f7000000000000000020af88008300"}) inotify_init1(0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) read(r6, &(0x7f0000000a40)=""/139, 0x8b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe78) 2m3.015442256s ago: executing program 7 (id=2198): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1b, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000008f000000000000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000aa000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018200000", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000002cc0)=""/4096, 0x41100, 0x1}, 0x94) 2m2.862846724s ago: executing program 7 (id=2199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) readv(r0, &(0x7f0000002100)=[{&(0x7f0000000780)=""/107, 0x6b}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000800)=""/122, 0x7a}, {&(0x7f0000000880)=""/154, 0x9a}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000f40)=""/144, 0x90}, {&(0x7f0000000000)=""/41, 0x29}], 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0x40]}, 0x0, &(0x7f0000000180)={0x77359400}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[], 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZqFaAaqqqg+nLSulorhjZ5sqKhJrxuNkwPZYMw5qJKRV2Sarqk4X2iLR3Cy54UFa3gDihgu44EUgcb3vghsE0grukJYLr+bJseOnuuu2u9vvJ9r1eM5/zvnPjOu/JvEcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHJqtl221PBaO3fMZE4t8Jvp8v97o+1Jb8u6lixcmzmuZEX/qVjU2WTV2W8dN5+J/ndF55Nn51WMHoo6fOPMm7e/mc9l209J+Hlo3g4fPz18cLfb3Xv0DLFLmrv7V0m5bOlUek7GBG25LS/0vWZ1yzVe6JvNjQ37xnY9NHWv4Ya7YcdtGidwcx0/MGvONVPe3Fw3bmnX32lt1aoNN1t567sV294wP1xJTrSkUuhse42G19qKY6LmKOaW+egnSYBbbRqzf7+7tz5rT6Kg8rMEVWYFVexKpVyuVMobNzdv3rLt/OCKnKS8HbHsPo1ssvAXLb5kFvPGDSxALqr//7CkhopqaUd3ZMb+OKopkK/mhPZUVv/fuuFOHXew/mdV/qz0/bT5nOL6fzF5dnFS/Z+Qi5GJNxjXYk1YP9/PcpyR0WM91aEe6K666mpPjxbQt5G5tJBeXsLPlly15CmUL09NVbWlP39d6RqjTW1oQ7be1bbqCmVUl6eGXIXaVaiO3PgV5SiQq6o68hXIaE2OrsmorE1tal1Grkrala8dtbSlmqr6X6/X29f9+LivT8lRWVB5QsDKYFBlSk/DxfyPyur/Tz9MXqd23j6B+v96SV4HK8nDx9NigC+AXnr9Pyg3e7NLLy4jAAAAAACwaFb823cr/tv9BUk91b2Ga7/qtAAAAAAAwAJZ6q3ovKzo+l/SBVlc/wMAAAAA8FVjxffYWZJW4w/1W8d3Qj3LLwGWXkKKAAAAAADgc4rv/L9YkHrxpBWXZM11/Q8AAAAAAL4Efjswx34+m2O3l/1ZPycpbK9Yf/vPioJl66h959vWQTVqqR6kMZ+e7LFTP2edTifqjR8KkuJnjnveOp9MjplOgtmfd/CT/Vlz/VvBiQQKS4MdTEjAikbeyKfP9JEuJ5tcTueZv3eYU9ySjLJa9xpuyfEbt8uqVk/nOu6dzi8e3v+lFPQ/6bB/v7tXeu+D7r04l6No1dFB1OmHQ+nkxh+M41yexPMtxPdcjNvjU6pnQ/6u1Vy14nHtbP+XVD3IDQ407QQcj/lrXVH8qY0rq0ns6mF/xv1o/4vR/pdL8Skb2vtg2TrOonxyz8ediAlZFOMsriYxV9euqvLPZLl/FnJW8TtLUqU0eg6GsqgMZjH7WFj/HTkWA1nED1nLwLFYj7L4e9TRhCzW58ti5IwAwKuyrwuK34UuKJ7EvF+FimndzcpD9qb2XHVndnV/Z7i6P/lDrxdvsCTl079NTB2lqOgdfc2K61Ah2aX8uTHv6HZaV4qa8I5uf47qFo311+PvQErTHsni016vd7scj/v7E1X1T0PDjYwbNipL0SG88eTgZ/EE+JH3997fe1iprG/Yb9v2zYqW491IH5ZE7QEAjJj9HTszI6y3dTmJuHzv328lS0MV7xv9jxSU9J4+UFf3dD37CoFL43tdHfgYwvXkqlUDV63mzJu34++lG44t6/rEq7q4lg7EVvqxy8o2Ga7Ux7HrL/gsAADwcl2ZUYfH1//iUP2/rrUkYu3c2Ovu4VqeXh33L+knxZZnJ//Ooo8GAACvBzf4xFrt/MYKAq/9bnlzs1ztbLsm8J0fmcCrbbnGa3XcwNmutrZc0w78ju/4DdMOtOLV3NCEO+22H3RM3Q9M2w+9O/E3v5v0q99Dt1ltdTwnbDfcaugax291qk7H1LzQMe2dHzS8cNsN4o3Dtut4dc+pdjy/ZUJ/J3DckjGh6w4EejW31fHqXrTYMu3Aa1aDXfNjv7HTdE3NDZ3Aa3f8pMNsLK9V94Nm3G0p3xv3eQEAAF47j58ePrjb7e49OrlwKro0T9YcaULM6EJBj59GV+XRmnzaxBxBAAB8wRwX8Dk2Kr7AhAAAAAAAAAAAAAAAAAAAAAAAwIjZt/TNubA87mZBqb/m56fTNfqVjm8xHOnH0qITm2chN+9W2S0Rhw8+nhRT0N1T/TXZ4R+MOXppO/ivr0lvxGuUrMkvfqxTU07ui1j43n5yRCfGRI1jm1b65yL/HP8cCpoZ8/AvE5p6vV5v+hArw8ewMLSDuWmD5iU9Ksx9CgojL1EAX1WfBQAA//843TOC") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340), 0x1, 0x525, &(0x7f0000000980)="$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") r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff7fff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x406, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$eJzs3MtrXNUfAPDvvXm0/fWR/Gp9tFaNFiH4SJq0ahduFAUXFQVd1GVMpiV02kgTxZZiU5G6EaSga3Ep+Be4EEQQdSW41Y0rKRTtptVV5N65N52ZzrSNnWRi5vOByZwz99yc873Pc8+ZJICeNZL9SCK2RcQvETFUyzYWGKm9XbtydvqvK2enk1haeu2PJC939crZ6bJoud7WIjOaRqQfJEUlmxvqnT995vhUtVo5VeTHF068NT5/+syT75yYOlY5Vjk5eejQwQMTzzw9+VRH4sziurrnvbm9u1964+LL00cuvvnDl1l7txXL6+PolJEs8D+Xcs3LHu10ZV22vS6d9HexIaxIX0Rku2sgP/+Hoi+u77yhePH9rjYOWFXZvWlT+8WLS8AGlkS3WwB0R3mjz55/81fS+efg9ezyc7UHoCz2a8WrtqQ/0qLMQNPzbSeNRMSRxb8/y16xSuMQAAD1Ppr+9HA8Udf/W+5/pHFP/v5b/nNHMYcyHBH/j4idEXFXROyKiLsj8rL3RsR9K6x/pCl/Y/8nvfSvg7sNWf/v2WJuq7H/V/b+YrivyG3P4x9Ijs5WK/uLbTIaA5uy/MRN6vjmhZ8/bresvv+XvbL6y75g0Y5L/U0DdDNTC1N5p7QDLp+P2NPfKv5keSYgiYjdEbGnxfpft//VO8rE7GNf7G1X6Nbx30QH5pmWPs/CW8ziX4ym+EtJ/fzk7A3zk+Obo1rZP14eFTf68acLr7ar/47i74DLldp73f5vLjKc1M/Xzq+8jgu/ftj2meZ6/FvaH/9J4zozUwvpYPJ6Ps88WHz27tTCwqmJiMHkcJ5v+Hzy+rplviyfHf+j+1qf/zuLdbLq74+I7CB+ICIejIiHirY/HBGPRMS+m8T//fPtl5XxR9ql/X8+Yqbl9W95ozft/5Un+o5/91W7+m/v+ncwT40Wn+TXv1to1ZzsctHcwDvZdgAAAPBfkebfgU/SseV0mo6N1b7Dvyv+l1bn5hcePzr39smZ2nflh2MgLUe6horx0OpstTKRLBa/sTY+OlmMFZfjpQeKceNP+rbk+bHpuepMl2OHXre1zfmf+b2v260DVtmWlp9ODq55Q4AuaJ5HTxuz514JFwPYqPy9NvSuW5z/6Vq1A1h77v/Qu1qd/+ea8uYCYGNy/4fe5fyHHpV+2+0WAF3k/g896U7+rn8VE5vXRzMa/lPA4lptsfW6U/JERJlI10V7JFYp0e0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8EwAA///cRegb") getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$P9_RGETLOCK(r3, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) creat(0x0, 0x186) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x100) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x6020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000080)='..\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 2m2.102766869s ago: executing program 7 (id=2202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1060}}, 0x400e000) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x6) listen(0xffffffffffffffff, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000480)=0x1e) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000930efcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800a00010069706f69620000000400028008000500", @ANYRES16=r5, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000700)={r2, &(0x7f0000000580)='s\xf9zkalUer\x00', 0x242600, &(0x7f0000000640)={@_ha_fsid={[0x3, 0x20000006]}, {0x3, 0x7, 0x9, 0x9}}, 0x8, &(0x7f0000000680), &(0x7f00000006c0)=0x6}) pwritev(r6, &(0x7f0000000840)=[{&(0x7f0000000740)="62a61e1838a196d86dfac7bd68732377cb81db904bc0602fa83ba16d02fbf3e8bbbf5d4f0d18bface810ce49f2418a14e4f1ce347f4a8ffab4b2dfd279906a4cfd25a85043aa6f255dcd0513c57c0953504d343b7cda19b8c4f9b83367508729a5f62ea46a2262e4d45331552f9decdcfa5f3e217bf9f0580b7798173c0d65cc78de334323af647aacb3313934c5b21bfcc043d4f116f9052208191fd07fae50f3f55e86eb28dad406c4a23812a7e77fcae314fee54a33ad82163da3a575e6f6380d205ec09b550bab03ac6f51", 0xcd}, {&(0x7f0000000900)="4756b9c9a7a9ec49acae2a9f1463987dca7a86e83e15fd2c4d41209f513dc669eed87c6cb88bd5d6ae1323ecfd82c08bd29dddd1949857bfd12839144f0a3bba9bb1564fe7b9bd4439e673c26c76c485f345af96d649cafd23bd170cf4fe08319651ff63c6de37771d378e0a73e9a17e37489b6e10ef7f4bb3954e6cf384b36c327872ae4fc31fe5d1aa7c3a01665c978239cb0bfb85c4d9943d30c1", 0x9c}, {&(0x7f00000009c0)="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", 0xfd}, {&(0x7f0000000ac0)="28195eca17cb5cb56d1435aa33bc38ffb9781feda570eae8a75e144027ef6878fd65b338553e7f05888966b70f396d3b240e409edc16304f3b2a9f5f1c361cb690e7ba9cee7a6b3c0a446b2d030373649c3897e7c59c8a37df44efb4154dd135c9464f1a03666b342d2c9e801091324f158ff67435e7fbe40daf292144dad353e0815b9b5eefba28c9dd8b5383a4f53ed81ba32e65cc6e0a2a2cef71a49531f24bbef91fdc0ad447d1f9bd012fe7aa990ef7e997a7fcc5b6467c2c874ef40d5cd134227376a4279e96ea2d130ed34668cfb8eb6ac10a5cc2e1834a6c0585", 0xde}, {&(0x7f0000000bc0)="ff14a101f9f92db028638d136dda3827ec46baa66c8babba4b57576f546039eec769a078650d29d473525bd35b72a9d26ec8f4a0619559d92a2c419f31c569960a7883b484a86206dfed1eb41190e6b04600224944becab81ed8d3aa94ecd96e9c80efed9f361521e5a7da608293b439c9b3c598743f44d147742c7219002c263ad1f012015bd87dd77a9d917966451acd1d430a0e3a42bc12c24783ffb81ae76328623660c5587f5905e334a81b6dd941f3fbece23505dbc3793e40bd9b36a81b771d", 0xc3}, {&(0x7f0000000cc0)="5fc889129f56fd6418034546669ab92c884d3bcd41cfb2845b5b3f0a202e125cc2ad2e8c41a886d7cf7397a1fb34994bfb10cb9e525afbb86cad763290fef72ec30f1a1537b67807c3c1e5f7d4419c48dbad0fb2d551b643c50260d3a72b5107032ad249f6152edd3ea2979663dbcd4f4a2c496dc309be60af0e53f1bd5237f5d882a7de75631305ec01ca53e6a70b86bda2a7f5d8396165e04f9958d455352de1e9fc3e21f829e602ecbf2d2c3fd33ac3f5b94d8c878561bbcd9794ca90f42aac5906f2a7e9aa19baa545287761fdea03379218a28dfa", 0xd7}], 0x6, 0x9, 0x80000001) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_OIF={0x8, 0x1f}]}, 0x24}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) (async) close(0x3) (async) r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r8, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r8}, 0x50) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x4, 0x7, 0xe, 0x6}, {0x8001, 0xe, 0x9, 0x400}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setpriority(0x1, 0x0, 0x80000000) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001000d010000600d02000092948dfe6565df42aec01e8062ee2c89e901b20a97b10cb0da6d411ad22d854755b10e9ea881dc58ab86f7f12a34489665d2c9c2092d927f341322d2ad6d0000c0dcbfd30ac5db98f899c022f0134fbc07fc99bc3ca18363c0d48d834af1cdc17163c9cf6cd1b5552fb39ce60975bab92705eca4a0ae9ffbd206a3"], 0x0) 2m1.96054006s ago: executing program 7 (id=2205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000605000400000000000900020073797a320000000014000780050015000200000008001200000000000500050002000000050001000600000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7a}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffd}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r7, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x20, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xce8b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) r12 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = syz_pidfd_open(r12, 0x0) r14 = dup(r13) fsetxattr$trusted_overlay_upper(r14, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r14, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6d656d6f7279202b70696473202d626c6b696b202b637075736574202d6e6574202d6e65748a636c73202b637075736574202a626c202d726c696d697420"], 0x49) 2m1.47053709s ago: executing program 7 (id=2211): r0 = socket(0x5, 0x803, 0xfffffffd) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000200)='\x00', 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r4, 0x29, 0xcc, 0x0, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) r5 = getpgid(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000500)={0x0, 0x52, 0x0, 0x0, 0x0, 0xfffffffc}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r9 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r8}) io_uring_enter(r9, 0x44fd, 0x3, 0x1, 0x0, 0x0) r12 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r12, 0x11, 0x0, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000140), 0x1003, r13}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x8000) 2m0.848429453s ago: executing program 7 (id=2214): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f00000001c0)='\x00', 0x81801) syz_emit_ethernet(0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x3, 0xc, 0x0, 0x70bd25, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fffffff, @loopback, 0x2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) pread64(r1, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fb) socket$netlink(0x10, 0x3, 0x8) 2m0.78534763s ago: executing program 35 (id=2214): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f00000001c0)='\x00', 0x81801) syz_emit_ethernet(0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x3, 0xc, 0x0, 0x70bd25, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fffffff, @loopback, 0x2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) pread64(r1, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fb) socket$netlink(0x10, 0x3, 0x8) 58.844421864s ago: executing program 4 (id=2658): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000"], 0x58) close(r0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x2, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000100)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={r3, 0xd, "8a82ca63800e3d97f3e94f8df6"}, &(0x7f0000000040)=0x15) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={r5, 0x7800000}, &(0x7f0000000140)=0x8) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) 58.651412205s ago: executing program 4 (id=2659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="6634fff8bc6e33adef330e70e0b343e7409da5dc6a1dbb615e00730eca5f7f4acf28a5f2b06c0027d5cc5a27e5e56b9eaf483d918d9efb58ccbea50d459629322fe3c534d7127af745da7eebfeb7bd9d45e430cb7a07c3045554b0bd1fe01813ebab3b27a902cd06fe44c97d4858b4d1df5caf0111e8c863799456bc30492cac0d3b6ef3af27744e4adeb9a48ae5c32a1929972699fa2ca1c66a"], 0x48) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@delchain={0x3cc, 0x65, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xfff2, 0x1}, {0xc, 0xffe8}}, [@filter_kind_options=@f_u32={{0x8}, {0x398, 0x2, [@TCA_U32_SEL={0x394, 0x5, {0x10, 0x7, 0x28, 0x1, 0x5, 0x800, 0x67e5, 0xb69c, [{0xfffffffe, 0xffffffff, 0x7, 0x1}, {0x5, 0x8a, 0xfffffff9, 0x6}, {0x4, 0xff, 0xf5, 0x8}, {0x1, 0xff, 0x4, 0x1}, {0x0, 0x101, 0x3, 0x9c1}, {0x6, 0x4, 0x270, 0x1}, {0x3, 0x3, 0x3a7e945d, 0xcf}, {0x5, 0x0, 0x0, 0x1}, {0x3fc2, 0x8, 0x3, 0x86e}, {0x1, 0xffffffff, 0x3, 0x481}, {0x9, 0x4, 0x5, 0x7d8}, {0x2, 0x7f, 0x6d, 0x1}, {0x4, 0x4, 0x4, 0x9}, {0x8, 0x4, 0x7ff, 0x4}, {0x7fffffff, 0x3, 0x4, 0xc95}, {0x7, 0x7, 0x0, 0x80}, {0xfffff575, 0x8, 0x3, 0x5}, {0x2, 0x0, 0x0, 0x400}, {0x7ff, 0x4, 0x9, 0x2}, {0x7, 0x6, 0x8, 0x7}, {0x2, 0xffff, 0x8, 0x800}, {0x101, 0x8, 0x5, 0x9}, {0x9, 0x8000, 0x2, 0x6}, {0x1, 0x100, 0x8, 0x400}, {0xfffffffe, 0xd9f, 0xbe47, 0x5d}, {0xc, 0x6, 0x0, 0x8001}, {0x200000, 0x7f, 0x5, 0x1}, {0x7f, 0x0, 0x6, 0x6}, {0x0, 0xfb, 0x1, 0x10000}, {0x10, 0x4, 0x80000000, 0x8}, {0x8, 0x6, 0x8001, 0xe}, {0x2, 0x3, 0x4, 0x9}, {0xa, 0x1f2e, 0x5a6, 0x9}, {0xfffffff7, 0x0, 0x10001, 0x2b9c}, {0x1ff, 0x8, 0xe, 0x8}, {0x9, 0x40, 0x80000000, 0x6}, {0x1, 0x0, 0x7, 0x5}, {0x6, 0x100, 0x0, 0x4f}, {0x7ff, 0x8, 0x7, 0x80}, {0x53, 0x0, 0x8, 0x8}, {0x7fff, 0x40, 0x4, 0x1d48c00}, {0x8, 0x1, 0xa, 0x1}, {0x3, 0x524, 0xe67, 0x75}, {0x6, 0x6, 0xfff, 0x7}, {0x7a, 0x8, 0x2, 0x7}, {0x80000001, 0x7743, 0x6, 0xa}, {0x8, 0x146e, 0xce68, 0x801d}, {0x5, 0x6, 0xf, 0x400}, {0xffff, 0x0, 0x7d9d8, 0x3}, {0x0, 0x2, 0x2, 0xc}, {0xff, 0xa8, 0xf854, 0x7fff}, {0x6, 0x7, 0x0, 0x80}, {0x3, 0x800, 0xb, 0x2ce0}, {0x3, 0x6, 0x7, 0xfffffff9}, {0x7, 0x1d7, 0x0, 0xe}, {0x6, 0x40200, 0x5, 0x1}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0x4}, {}, {0x7, 0xffe5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xf, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r10 = dup2(r9, r9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) lseek(r11, 0x104, 0x0) (async) getdents64(r11, 0xfffffffffffffffe, 0x55) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4, 0xf, 0x2001, 0x1, 0xc}) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x493741, 0x78) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="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") (async) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r12, 0x8916) (async) r13 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r13, 0xc0bc5351, &(0x7f0000000500)={0x7fffffff, 0x0, 'client0\x00', 0x80000004, "2071ee001600", "27315db9f34dac3d618a687a54bb5de9e391f2f5f18f126cbd0600fc93d96590", 0x9, 0xb}) 58.420422917s ago: executing program 4 (id=2661): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x501800, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000580)=0x0) write$P9_RGETLOCK(r1, &(0x7f0000000780)={0x22, 0x37, 0x2, {0x2, 0xcb2, 0x3, r3, 0x4, 'GPL\x00'}}, 0x22) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) splice(r1, &(0x7f0000000180)=0x6, r0, &(0x7f00000001c0)=0xd14, 0x4, 0x8) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100e000000208000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c0002800500010000000000300001802c000180"], 0x8c}}, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) (async, rerun: 32) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x41, 0x0, 0x6}, @generic={0x94, 0x7, "ff4077303c"}]}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x44008004) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.89505983s ago: executing program 4 (id=2669): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1010040, &(0x7f0000000380), 0xfd, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x36) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x13, 0x2000}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x13, 0x2000}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYRESDEC=r2], 0x7c}}, 0xc000) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010100000000000000000200efff094c000000060a0904000000000000000002000000200004801c0001800b0001006f626a72656600000c000280080003400000000b0973797a300000ffffffffffffffff7a3200000000140000001100010000000000000000000000000122cbd7d19009ae2c1da0e5d127d8f6a52edfa869283d15ce61fcd9009b799ca99b46f42abc8ad1e0a1314eee9c3e8c4e7e4764572b785b50a32dc09b7450e0a962c163a443d12d8f804575c6857fefa928faee9735c33d1298c7fed48ac899505f1564348e64b4f22a42e380cf1c5c57b251bd9da732a11d80a309318f394e3f5cde00a4919e94c73e9dbd0d887eefe0a6e46a2fe60a59f5df77955fa72b12cd23633d5a"], 0x74}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ftruncate(r3, 0x100) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3ea2, 0x8}, 0x102802, 0x0, 0x0, 0x5, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) socket$inet6(0xa, 0x4, 0x4) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) (async) r6 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) memfd_secret(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r9, @ANYBLOB="240003801c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2404c054}, 0x24000040) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r9, @ANYBLOB="240003801c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2404c054}, 0x24000040) 57.304453289s ago: executing program 4 (id=2673): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)=""/95, 0x5f}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x9000, 0xa88, 0x8409, 0x7, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x34000}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)="9b", 0x1}], 0x1}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 55.354918891s ago: executing program 4 (id=2687): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1b, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000008f000000000000002300000018110000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018200000", @ANYRES32, @ANYBLOB="f5ffffff0600000018530000060000000000000000000000186900000e00000000000000ffff00008a06000000000000bf9100000000000000000000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000002cc0)=""/4096, 0x41100, 0x1}, 0x94) 55.321940284s ago: executing program 36 (id=2687): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1b, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000008f000000000000002300000018110000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018200000", @ANYRES32, @ANYBLOB="f5ffffff0600000018530000060000000000000000000000186900000e00000000000000ffff00008a06000000000000bf9100000000000000000000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000002cc0)=""/4096, 0x41100, 0x1}, 0x94) 23.418465206s ago: executing program 2 (id=2899): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x21, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x2, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 20.20949204s ago: executing program 6 (id=2921): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x25, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x3200c94, &(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x1, 0x2c7, &(0x7f0000000bc0)="$eJzs3E9rE10Ux/HTpm3SlDZ54EFQUA+60U1o4wvQIC2IAaU2RV0IUzvRkDEpM6ESEZuNuPV1FJfuBPUF2I24cefCXREEN12II85k2jRNQ5qkSdp+P1DmZu799Z6mfzhTmNm8+/pJPuskskZJhiMqwyIV2RKJ/xtVDVWPw954TGpV5PLEr69n79y7fzOVTs/Oq86lFq4kVXXq/Punz99c+FiaWHw79S4sG/EHmz+T3zdObZze/LPwOOeMiqOFYkkNXSoWS8aSZepyzsknVG9bpuGYmis4pr1rPmsVV1bKahSWJ6Mrtuk4ahTKmjfLWipqyS6r8cjIFTSRSOhkVE62kRbWZNbn543UvtNuqKsV4dCNNzpp26lK48nMeg9qAgAAA6Z5/+/3+vv3/+lF/9hW/6+5/fp/kY77/09jvX8vj4JK7Yst13Wb9f+BWMOzke5VhY58a36ta9spI1r9/d2N/h8AAAAAAAAAAAAAAAAAAAAAgKNgy3VjruvGgmPwEa7e4BG87nedOBxtfv+v9qlcdFnNjXsREevVamY14x/9+VRWcmKJKdMSk9/ez0OVP567kZ6dVk9cPlhr1fzaaiYk4SAfiAf5Ie82ND9/7r8ZP6+786MSrd0/KTH5v/H+yYb5Mbl0cTs/LgmJyeeHUhRLlr29d/IvZlSv30rX5ce9dQAAAAAAHAcJ3bbn+t2b9xZEZO+8nz/A/wfqrq9H5Ewrj6gEAAAAAAAdc8rP8oZlmXYbg7CIdBA/roOQDEQZdYNrIjIAZfRqEBER/4y2E/+xHW+0Jix1Z9wWPvOIiPT9bTnAoN9/mQAAAAB0207Tf4DQl5eHWBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPq88DC9bvmQommsRrtgv1/AsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsjfAAAA//+vch8T") r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$setown(r4, 0x8, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 18.666352744s ago: executing program 6 (id=2926): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x1e, 0x5, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x80c, &(0x7f0000000300)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x2) open(&(0x7f00000000c0)='./file1\x00', 0x2002, 0x14a) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0x4, 0x2b, 0xb, 0x6, 0x1], 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x78) lstat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) 17.620728471s ago: executing program 6 (id=2929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) 16.78403079s ago: executing program 6 (id=2935): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) clock_getres(0x7, &(0x7f0000000080)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x717480, 0x98, 0x20}, 0x18) openat(r0, &(0x7f00000000c0)='./bus\x00', 0x640580, 0x43) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_pgetevents(0x0, 0x7, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xda]}, 0x8}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) preadv2(r1, 0x0, 0x0, 0xffff, 0x4, 0x4) 15.862668322s ago: executing program 3 (id=2938): ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000100)) 15.745147497s ago: executing program 3 (id=2940): r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x60000002) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) close(r0) 15.582564095s ago: executing program 3 (id=2941): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x30100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x7, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000002000000000000008e95b320b5f02e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffff7f000000000101000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000006fc98000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000210900010073797a30"], 0x10c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB=':'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x1}, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, @in6={0xa, 0x4e24, 0x10, @mcast1, 0x7f4c}], 0x54) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) 12.921509901s ago: executing program 3 (id=2953): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x1e, 0x5, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x80c, &(0x7f0000000300)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x2) open(&(0x7f00000000c0)='./file1\x00', 0x2002, 0x14a) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0x4, 0x2b, 0xb, 0x6, 0x1], 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x78) lstat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) 12.618977439s ago: executing program 3 (id=2954): unshare(0x28040680) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, r5, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x20000000) write$char_usb(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x2405, 0x4, 0x0, 0x0, 0x21ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 12.206966664s ago: executing program 3 (id=2956): setreuid(0x0, 0xee00) socket$vsock_stream(0x28, 0x1, 0x0) geteuid() r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="a6", 0x1, 0x20000000, &(0x7f0000000040)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) shutdown(r1, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) 8.087927263s ago: executing program 9 (id=2966): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600140, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0xe, 0x400, 0xb, 0x5, 0x16, "7fbf01feaea9919b5dad8934c3e67d0a260f42"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4202, 0x0) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x3, 0x800) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344}, 0x6, 0x10) write$tun(r2, &(0x7f0000000200)={@val={0x0, 0x88a2}, @void, @ipv6=@tcp={0x0, 0x6, "c6d9a9", 0x309, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[@fragment={0x84, 0x0, 0x5, 0x0, 0x0, 0x17, 0x67}, @routing={0x4, 0x4, 0x2, 0x36, 0x0, [@private0, @mcast2]}, @dstopts={0x2c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @pad1, @jumbo={0xc2, 0x4, 0x4866}, @pad1]}, @hopopts={0x33}, @hopopts={0xc, 0x5, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0xd, 0x30, [0x9]}}, @enc_lim={0x4, 0x1, 0x7e}, @pad1, @ra={0x5, 0x2, 0x400}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x2c, 0x38, '\x00', [@jumbo, @generic={0x79, 0xd9, "d586b8c68c5038e4afa3ddfbbbf287ac1577a6564ee52fb721bb5fba7cde143b4de732fa61fe665b6cb60c27f2ae6c03c42fd62416cc56c1e0ac5f1e1072d19369e34dcd1e4ec3aeb8ce310d5eed372c828ec932db28f2086d5142ae43fa9e9de7f2bf63ca8afb986ca070ecd1dfef2ad887b999fe8052810b1daca265e932954adf441b242d752843371e5f1a343637d1379846e9f5b7052cdb7747b349a6140b2610b4e47f954409dc5c7161a77b53f79527c77d01613440437ac00734afcb3c8b6b5ac9479f22906a8f4125327ed46ae7bd3c894d0cefc3"}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x5, 0xda, "a2ab1d91a4d917018f9286829787e0baba9ac34776d93ec8f679b08b83f694f8a0940e95f9792d5f98563a7336effa4c35adfcf2b77a0c3917dfb1f4f8e494e1aa83760206ee54663104b2ef7ca0d8809956d353a1a8ee1416761bc6176502bc6aabf919de19c5e3c6a9477cab620dce1dfd6d40532cde9793b11daa8db4d8747280df18157c15d61e8a850a83d0117464f5c9100886f8eb629f04aa136872967b284d726df8cb6dd824488611b9ee876ea13c1413cecc610c93356bb54044e484a91ec6c8dfc18efcfa4531eb61a3897693e12b1f29f2034475"}]}], {{0x4e23, 0x4e24, r3, r4, 0x1, 0x0, 0x17, 0xf9eb62515a21808b, 0x2400, 0x0, 0x1000, {[@window={0x3, 0x3, 0xf7}, @sack={0x5, 0x1e, [0x0, 0x7fec, 0x877, 0x1, 0xc8, 0x2, 0x40]}, @mptcp=@capable={0x1e, 0x14, 0xa, 0x8, 0x55, 0x1, [0x10]}, @exp_fastopen={0xfe, 0x10, 0xf989, "ca979f912b3564a07ece3571"}]}}, {"0701ad111d4fe7d11e3fc69550e402bea42aa19a78d0f9f3eb59d86d3d7d3210dbbf61801d2f79a75765643480387f3eed3c09fad28b093e3f6c8d2bd4dfd83c4b1d590b45212db9993816c334e81c6dd68d1770097622bb2d9ae237f0"}}}}}, 0x335) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000540)=""/210) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/57, 0x39, 0x0, &(0x7f0000000680)=""/46, 0x2e}, &(0x7f0000000700)=0x40) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000740)={'vlan0\x00'}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000001780)={&(0x7f0000000780)=""/4096, 0x1000, 0xe, 0x4e46}) r5 = syz_open_dev$sg(&(0x7f00000017c0), 0x5, 0x4000c3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001800)={0x0, 0x0}) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000001880)={'\x00', 0x5, 0x200, 0x4, 0x3, 0x6, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r7) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000001940)={0xf59, 0xa6, 0x4, 0x9, 0xe8, "02280b448f1d732b7b9983f4eaeae756e71497", 0x5, 0x1}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r1) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000001c00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x1b4, r9, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0xe3fc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) r10 = dup(r7) write$tun(r10, &(0x7f0000001c40)={@void, @void, @mpls={[{0x8, 0x0, 0x1}, {0x30001, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv4=@igmp={{0x14, 0x4, 0x0, 0x8, 0x68, 0x68, 0x0, 0x5, 0x2, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xfb, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x36a}, {@loopback, 0xc}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x13, 0x1b, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1]}, @rr={0x7, 0xb, 0x92, [@broadcast, @broadcast]}]}}, {0x1f, 0xe, 0x0, @broadcast, "0ad6e3732df8e106794e6387f7487c11"}}}}, 0x80) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001cc0), 0x490080, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r7) sendmsg$NL80211_CMD_GET_COALESCE(r11, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x20, r12, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x52}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44080) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000001e40)={0x1, 'ip6gre0\x00', {}, 0x8}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000001f80)={0x0, 0x2}, 0x8) 7.246350981s ago: executing program 9 (id=2968): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCzbdhsQ80mW7Kb0oQcWkTwIqh4EPTSsy/15tWXq/4XHqSlalqseJDIbGbbbbObbtrsbjCfD0z2eWZm8zzffWaeeWZn2AlgzxpL/+QiDkXEh0nESDY/iYiBWqo/4sTGerfXVgvplMT6+pu/J7V1bq2tFqLhPakDWebJiPjhvYjDuc3lVpZX5qZLpeJilp+ozp+fqCyvHDk3Pz1bnC0uHJucmjp6/IXjx3Yu1j9/Xjl4/aPXnv36xN/vPnH1gx+TOBEHs2WNceyUsRjLPpOB9CO8x6s7XViPJb2uAA8l3TX7NvbyOBQj0VdLtTDUzZoBAJ2yDgDsQYkxAADsMfXvAW6trRbqU2+/keiuG69ExP6N+OvXNzeW9GfX7PbXroMO30ruuTKSRMToDpQ/FhGff/v2l+kUWTu4lgZ0w6XLEXFmdGxz/59sumdhu57bauH6YO1l7L7Ze+34A730XTr+ebHZ+C93Z/wTTcY/g0323Yfx4P0/dy1L9O1AcZuk47+XG+5tu90Qf2a0L8v9rzbmG0jOnisV077t/xExHgODaX6ytmrzkdv4zX9utiq/cfz3x8fvfJGWn77eXSN3rX/w3vfMTFenHzXuuhuXI57qbxZ/cqf9kxbj31NtlvH6S+9/1mpZGn8ab33aHH9nrV+JeKZp+99ty2TL+xMnapvDRH2jaOKbXz4dblV+Y/unU1p+/VygG9L2H946/tGk8X7NyvbL+OnKyPetlj04/ubb/77krVp6Xzbv4nS1ujgZsS95Y/P8o3ffW8/X10/jH3+6+f6/UWzz7T89JzzTZvz913/76uHj76w0/plttf/2E1dvz7Xsu9tr/6laajyb007/124FH+WzAwAAAAAAAAAAAAAAAAAAAAAAAIB25SLiYCS5/J10LpfPbzzD+/EYzpXKlerhs+WlhZmoPSt7NAZy9Z+6HGn4PdTJ7Pfw6/mj9+Wfj4jHIuKTwaFaPl8ol2Z6HTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3bO/4P9SxegAA3eP8HwD2nraP/2c6Ww8AoHu2e/7f16F6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8J916uTJdFr/a221kOZnLiwvzZUvHJkpVuby80uFfKG8eD4/Wy7Plor5Qnm+5T+6tPFSKpfPT8XC0sWJarFSnagsr5yeLy8tVE+fm5+eLZ4uDnQtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoX2V5ZW66VCouSmyZGNod1dg1if7YFdWQ6FiisZcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDL/RsAAP//gWUuJA==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x943042, 0x80) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/174, 0xae}], 0x1) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000140)="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", 0xfc) r2 = socket(0xa, 0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x22080) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r7, 0x0, 0x27, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000180)={0xb0000010}) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000005000000300000007f00000020000000000006008400000008000000ff010000000800000000000000000001"], 0x38, 0x4855}, 0x24000052) sendfile(r0, r0, 0x0, 0x7a680000) 5.261258826s ago: executing program 8 (id=2973): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) ioperm(0x0, 0x7, 0x80006) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4ee, &(0x7f0000001100)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvbRCpFUSfCmp9jzHZhJBNNmQ3tQlFU/wAgogKPvnki+AHEKQfQYSCvosWRbTVBx+0Izs7sW26m6Qkzaab3w9O95w5s/M/Z5o9s7NzmAngzHo3Iq5HxFBEvBcR5WJ5WqTZIrXXe/Twznw7JZFlN/+eRFIs291WuzwcERciYiciRiLiG1+N+HbyfNzm1vbKXL1e2yjK1dbqerW5tX1leXVuqbZUW5uenvpw5urMBzOTWeFI/bwYEde+/ODHP/jFV6795rPf+ePsXy9/t92sL3y80+6ImD9SgB462y7l+2JXex9tvIxgfTBU9KfU74YAAHAo4xFxKSI+lX//L8dQ/m0OAAAAGCTZF0fjP0lEBgAAAAysNCJGI0krxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcW2nURY1FKF5frtclirvBYlJJ2eSrPPym/v6c8HRFvRsSPyufycmW+UV/o948fAAAAcEZceOfZ8/9/ldM8DwAAAAyYsZ4FAAAAYFA45QcAAIDB5/wfAAAABtrXbtxop2z3Od4Lt7Y2Vxq3rizUmiuV1c35ynxjY72y1Ggs5ffsWz1oe/VGY/1zsbZ5u9qqNVvV5tb27Gpjc601u/zMI7ABAACAE/TmO/f+kETEzufP5SmK+wDuNXTiLQNOlT/3uwHAcXJch7NruN8NAPqmdOAaRggYdMkB9T0n7/z2+NsCAAC8HBOfeP76/2tF3cG/DQCvsm5zfQCAwebqHpxdJTMA4cwb77y83qv+6Nf/s+yFGwUAAByr0TwlaaW4FjgaaVqpRLyRPxaglCwu12uTEfGRiPh9ufR6uzyVvzM5cM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlk3SRdlwIAAACvoIj0L0l+N/+IifL46N7fB15L/l2OB0XhZzd/cnuu1dqYai//Rzmvj4jWT4vl72ceCQAAAACnQOc8vXid6ndrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg0jx7emd9NJxn3b1+KiLFu8YdjJH8diVJEnP9nEsNPvS+JiKFjiL9zNyLe6hY/icdZlo0VregW/9xLjj+W75ru8dOIuHAM8eEsu9cef653+/yl8W7+2v3zN1yko+o9/qX/H/+Geow/bxwyxsX7v6r2jH834uJw9/FnN37SI/6lQ8b/1je3t3vVZT+PmOh6/EmeiVVtra5Xm1vbV5ZX55ZqS7W16empD2euznwwM1ldXK7Xin+7xvjhJ3/9eL/+n+8Rf+yA/o8fsv//vX/74Uc72VK3+JcvdT/+vtUjfloc+z5d5Nv1E7v5nU7+aW//8ndv79f/hR79P+j///Ih+//e17//p0OuCgCcgObW9spcvV7b2Cczcoh1ZF4kUzodzThFmex7nb/Ho23niG9/LpP1e7f0MdPvkQkAADhuT77097slAAAAAAAAAAAAAAAAAAAAcHadxO3E9sbc6U9XAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD29b8AAAD//3iP3Ow=") (async) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) creat(&(0x7f0000000240)='./bus\x00', 0xc2) (rerun: 64) io_setup(0x80, &(0x7f0000000280)=0x0) lsm_list_modules(0x0, 0x0, 0x10000000) (async) io_submit(r4, 0x0, &(0x7f00000002c0)) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x100003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) (async) setresuid(r3, r3, 0x0) 5.130830719s ago: executing program 8 (id=2974): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2940740, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@abort}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x5, &(0x7f0000000040)=""/5, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='system_u:object_r:semanage_read_lock__u:object_r:net_conf_t:s0 0000000000540677937 /'], 0x6e) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c000000411d074f4dfbe5b10500f80fbd599a88d58750d79355ff3c7f9503f484854dc11dc6145feb331ef4b337be4b4079d8f5a800000000000000001efa46880ce63ea5c0ade97ff06834ed44a915e55c2c75babab2275d3de870dedda947e5548d045f1aba432d75915de480f476b4c30ba3127a2376b37cde699b132c1a5c06bda5b0b5a194160240051c2c0c0e095c12d00b525a29007a00"/170, @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf2512000000080006000200000008000800bdea00000800070008000000080006007d530000080009000500000008000900050000000800060000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) write$tun(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x18c) write$tun(r4, &(0x7f00000020c0)=ANY=[@ANYBLOB="08000019"], 0xfba) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000009c0)) getrusage(0xfffffffffffffffe, 0x0) 4.741361729s ago: executing program 2 (id=2902): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x201, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) perf_event_open(&(0x7f0000010480)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x181, 0x6}, 0x60a5, 0x0, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r1, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000380009000000000000000000010000000c0000000600005daf41f002694100000000000c0003800600060004060000"], 0x2c}}, 0x0) read$eventfd(r0, &(0x7f0000000680), 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc01001d000000000000000000000001000107144e230005000000003a0000007bb34fafaf623eb9abea1cb9a5967ecdff1c147a393873ebe98d243f225dff029b762ad02145e300454c6dbe3be7924ad4167632516a3a5173efdbae294781bcda7194a7be5465239684352ea1a9bbb5e82e7d03a0ccaa36a33330193bb26800e4e66b00b2c8892b5b72bb7feae9bb3d34e34679e3ea34bcb61f31fb1e906483116ce5fd027ad098b411702ac4fe642054d1db3b8c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x40002) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}}, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x4) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000880)={0x9, 0x7, 0xa}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000140), 0x2, 0x475, &(0x7f0000000280)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x224247d4, &(0x7f0000006680)) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="380100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000100000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffc06b79995b05cec9436bfffffffeffff0fb5fffc030000000000008000000005350000020001002000000000000000480003006465666c61746500"/242], 0x138}}, 0x844) 3.389532213s ago: executing program 2 (id=2975): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x30100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x7, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000002000000000000008e95b320b5f02e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffff7f000000000101000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000006fc98000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000210900010073797a30"], 0x10c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB=':'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x1}, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, @in6={0xa, 0x4e24, 0x10, @mcast1, 0x7f4c}], 0x54) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) 2.384839818s ago: executing program 8 (id=2976): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0x6, 0xe3df, 0xc265, 0x2, 0x8e4, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0x5, 0x9, 0x8, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x400003, 0x8, 0x107a, 0x5, 0x5, 0xd6bc, 0x1ff, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa6, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x0, 0xffffffff, 0xa0, 0x7fffffff, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x101, 0x2, 0x4, 0x3, 0x1400, 0x5, 0x1, 0x103, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0xffffffff, 0x6, 0xffffffff, 0x5, 0x0, 0x6, 0xa0, 0x7, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x7ff, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x405, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0xfffffffc, 0x9, 0x8, 0x2, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x3, 0x0, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0x401, 0x6, 0x9982, 0x5, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x5, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0x100000c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x3, 0x7, 0x40, {0x4, 0x2, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.914853582s ago: executing program 8 (id=2977): r0 = socket(0x8, 0x3, 0x0) syz_read_part_table(0x5d2, &(0x7f00000000c0)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0xee01) setpriority(0x2, 0x0, 0xb842) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0x41}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x20002, 0x26) write$P9_RAUTH(r7, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x1, 0x4, 0x4}}, 0x14) mount$9p_virtio(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@cache_fscache}]}}) close_range(r3, r4, 0x2) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newlink={0xb0, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, 0xb}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'sit0\x00'}, {0x14, 0x35, 'rose0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'wlan1\x00'}, {0x14, 0x35, 'bridge0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket(0x28, 0x3, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x16}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000180)={0xab000500, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r10, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r9, 0x0}]) getsockname$packet(r8, 0x0, &(0x7f0000000700)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000006c0)={'sit0\x00', 0x0}) 1.80673755s ago: executing program 9 (id=2978): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x820001, @private0, 0x4000000}], 0x7) 1.475823652s ago: executing program 2 (id=2979): r0 = syz_open_dev$sg(0x0, 0x0, 0x80100) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000100)) 1.330916852s ago: executing program 9 (id=2980): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000026c0)=0x3d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x62000000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) setregid(0x0, 0xee01) setresgid(0x0, 0xee01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x1]}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) 1.290707945s ago: executing program 2 (id=2981): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4000000b, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) close(0x3) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0xc040) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) 1.140421734s ago: executing program 8 (id=2982): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x5}, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'veth1_vlan\x00', {0x2, 0x0, @remote}}) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'gre0\x00', {0x2, 0x0, @multicast2}}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000200), &(0x7f00000002c0)=0x4) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 513.069615ms ago: executing program 6 (id=2935): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) clock_getres(0x7, &(0x7f0000000080)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x717480, 0x98, 0x20}, 0x18) openat(r0, &(0x7f00000000c0)='./bus\x00', 0x640580, 0x43) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_pgetevents(0x0, 0x7, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xda]}, 0x8}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) preadv2(r1, 0x0, 0x0, 0xffff, 0x4, 0x4) 458.780845ms ago: executing program 9 (id=2983): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000140)=0xf, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b0000c33c878bf104", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 370.378627ms ago: executing program 6 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x2000000000000216, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xafe, 0x7f, 0x16, "0c09000000f19dd026d700", 0xed, 0x1ffff}) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x7f}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = gettid() r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) write(r0, &(0x7f0000000400)="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", 0x105) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000d00)="8c", 0x1}], 0x1) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000180)={r5}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x44) close(r5) connect$802154_dgram(r5, &(0x7f0000000140)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x462b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4c, 0x2}, @const={0x9, {0x100, 0xfffc, 0x822, 0x3}}}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r7, 0x1, 0xffffffff, 0x25dfdbfd, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x100000000000000}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffdfffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) tkill(r3, 0x29) 239.19493ms ago: executing program 9 (id=2985): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) capset(0x0, &(0x7f0000000280)) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c788", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r4 = open(&(0x7f0000000240)='.\x00', 0x10b800, 0xb9) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f0000000100)={0x8003, 0x1000, 0x2000, 0x0, 0x0, 0x5, 0x2401}) 167.113495ms ago: executing program 2 (id=2986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 8 (id=2987): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x10, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106086, 0x2, 0x20da, 0x7, 0xa, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = fcntl$dupfd(r3, 0x406, r3) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f00000045c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf252610000008000300", @ANYRES32=r6, @ANYBLOB="0c009900040000006b0000000a00340001010101010100000400d0000a0034000202020202020000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8004) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r7, r9, 0x25, 0x0, @void}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r11], 0x20}}, 0x2000e844) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000490001002dbd7000fbdbdf250a002000", @ANYRES32=r1, @ANYBLOB="c047b5564100020004f80000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) kernel console output (not intermixed with test programs): 00000000 r/w without journal. Quota mode: none. [ 384.416982][T13432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 384.477015][T13432] System zones: 0-1, 3-36 [ 384.568912][T13432] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2477: bad orphan inode 134217728 [ 384.604627][T13432] loop4: lost filesystem error report for type 5 error -117 [ 384.665573][T13432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.926378][ T28] kauditd_printk_skb: 1270 callbacks suppressed [ 384.926395][ T28] audit: type=1400 audit(1771964258.399:31525): avc: denied { read } for pid=13431 comm="syz.4.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.001404][ T28] audit: type=1400 audit(1771964258.399:31526): avc: denied { module_request } for pid=13473 comm="syz.3.2488" kmod="nft-expr-7-dup" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 385.047233][ T3319] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 385.131758][ T28] audit: type=1400 audit(1771964258.399:31527): avc: denied { connect } for pid=13375 comm="syz.6.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 385.254233][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.266126][ T28] audit: type=1400 audit(1771964258.429:31528): avc: denied { perfmon } for pid=13471 comm="syz.8.2487" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.337152][ T28] audit: type=1400 audit(1771964258.429:31529): avc: denied { kernel } for pid=13471 comm="syz.8.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 385.352336][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 385.371468][T13377] audit: audit_backlog=65 > audit_backlog_limit=64 [ 385.385289][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 385.391902][ C0] audit: audit_lost=342 audit_rate_limit=0 audit_backlog_limit=64 [ 385.399765][ C0] audit: backlog limit exceeded [ 385.581048][T13492] lo speed is unknown, defaulting to 1000 [ 385.641228][T13492] lo speed is unknown, defaulting to 1000 [ 386.207588][T13513] loop3: detected capacity change from 0 to 128 [ 386.225531][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2497'. [ 387.476098][T13547] atomic_op ffff88811c2dc128 conn xmit_atomic 0000000000000000 [ 387.588494][T13553] loop3: detected capacity change from 0 to 512 [ 387.602347][T13553] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 387.643654][T13553] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2508: bad orphan inode 15 [ 387.656707][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2509'. [ 387.677223][T13553] loop3: lost filesystem error report for type 5 error -117 [ 387.684325][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 387.689378][T13553] ext4_test_bit(bit=14, block=18) = 1 [ 387.691672][ C1] EXT4-fs (loop3): initial error at time 1771964261: ext4_orphan_get:1417 [ 387.712080][ C1] EXT4-fs (loop3): last error at time 1771964261: ext4_orphan_get:1417 [ 387.713790][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2509'. [ 387.766289][T13553] is_bad_inode(inode)=0 [ 387.770493][T13553] NEXT_ORPHAN(inode)=1023 [ 387.804177][T13555] erspan0: entered promiscuous mode [ 387.822093][T13553] max_ino=32 [ 387.833630][T13553] i_nlink=0 [ 387.837865][T13555] gretap0: entered promiscuous mode [ 387.845711][T13555] debugfs: 'hsr0' already exists in 'hsr' [ 387.851756][T13553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 387.869346][T13555] Cannot create hsr debugfs directory [ 387.875484][T13563] loop4: detected capacity change from 0 to 2048 [ 387.894111][T13553] ext2 filesystem being mounted at /542/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 387.935109][ T8355] loop4: p1 p2 [ 387.959231][T13563] loop4: p1 p2 [ 388.059357][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 388.076304][T13569] xt_hashlimit: size too large, truncated to 1048576 [ 388.518220][T13584] loop8: detected capacity change from 0 to 4096 [ 388.546202][T13584] EXT4-fs: Ignoring removed bh option [ 388.551922][T13584] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.597388][T13584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.780590][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.968292][T13596] loop4: detected capacity change from 0 to 4096 [ 388.976108][T13596] EXT4-fs: Ignoring removed bh option [ 388.981546][T13596] EXT4-fs: Ignoring removed mblk_io_submit option [ 389.001112][T13598] af_packet: tpacket_rcv: packet too big, clamped from 22 to 4294967286. macoff=82 [ 389.022171][T13596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.037049][T13598] 9pnet_fd: Insufficient options for proto=fd [ 389.100270][T13601] loop8: detected capacity change from 0 to 512 [ 389.110935][T13601] EXT4-fs: Ignoring removed bh option [ 389.119756][T13601] EXT4-fs: inline encryption not supported [ 389.150399][T13601] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.210984][T13601] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 389.254919][T13601] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2520: bg 0: block 248: padding at end of block bitmap is not set [ 389.374464][T13601] loop8: lost filesystem error report for type 5 error -117 [ 389.384423][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 389.398208][ C1] EXT4-fs (loop8): last error at time 1771964262: ext4_validate_block_bitmap:441 [ 389.408974][T13601] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2520: Failed to acquire dquot type 1 [ 389.443634][T13601] loop8: lost filesystem error report for type 5 error -117 [ 389.464068][T13601] EXT4-fs (loop8): 1 truncate cleaned up [ 389.480711][T13601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 389.589907][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 389.616026][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.642188][T13601] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 389.875633][T13604] loop3: detected capacity change from 0 to 1024 [ 389.889146][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 389.900177][T13615] netlink: 'syz.6.2527': attribute type 13 has an invalid length. [ 389.961401][ T28] kauditd_printk_skb: 881 callbacks suppressed [ 389.961414][ T28] audit: type=1400 audit(1771964263.429:32399): avc: denied { mounton } for pid=13602 comm="syz.3.2524" path="/546/bus" dev="tmpfs" ino=2953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 390.093084][ T28] audit: type=1400 audit(1771964263.459:32400): avc: denied { prog_load } for pid=13612 comm="syz.4.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.154288][T13604] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 390.164547][T13604] System zones: 0-1, 3-36 [ 390.186375][ T28] audit: type=1400 audit(1771964263.459:32401): avc: denied { bpf } for pid=13612 comm="syz.4.2526" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.208161][ T28] audit: type=1400 audit(1771964263.459:32402): avc: denied { prog_load } for pid=13612 comm="syz.4.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.227702][ T28] audit: type=1400 audit(1771964263.469:32404): avc: denied { bpf } for pid=13612 comm="syz.4.2526" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.248512][ T28] audit: type=1400 audit(1771964263.469:32405): avc: denied { perfmon } for pid=13612 comm="syz.4.2526" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.271146][ T28] audit: type=1400 audit(1771964263.469:32406): avc: denied { prog_run } for pid=13612 comm="syz.4.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.317269][T13604] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2524: bad orphan inode 134217728 [ 390.354564][T13604] loop3: lost filesystem error report for type 5 error -117 [ 390.376335][ T28] audit: type=1400 audit(1771964263.469:32407): avc: denied { ioctl } for pid=13612 comm="syz.4.2526" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38101 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.385954][T13604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.533627][ T28] audit: type=1400 audit(1771964263.459:32403): avc: denied { create } for pid=13560 comm="syz.2.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.574795][ T28] audit: type=1400 audit(1771964263.479:32408): avc: denied { setopt } for pid=13560 comm="syz.2.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.909499][T13615] batman_adv: batadv0: Interface deactivated: dummy0 [ 391.452917][T13615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.588817][T13638] loop4: detected capacity change from 0 to 2048 [ 391.655129][ T8062] loop4: p1 p2 [ 391.675292][T13638] loop4: p1 p2 [ 391.867010][T13639] xt_hashlimit: size too large, truncated to 1048576 [ 392.598685][T13664] random: crng reseeded on system resumption [ 392.626469][T13666] can: request_module (can-proto-0) failed. [ 392.640896][T13666] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2537'. [ 392.653916][T12536] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.663362][T12536] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.704498][T12536] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.713416][T12536] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.771182][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.784512][T12536] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.793507][T12536] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.838887][T12536] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.873048][T12536] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.997729][ T2221] Bluetooth: hci0: Frame reassembly failed (-84) [ 393.291382][T13698] lo speed is unknown, defaulting to 1000 [ 393.320484][T13698] lo speed is unknown, defaulting to 1000 [ 393.595262][T13713] loop3: detected capacity change from 0 to 8192 [ 393.892069][T13724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2552'. [ 394.039985][T13728] loop2: detected capacity change from 0 to 1024 [ 394.104727][T13728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 394.134122][T13731] loop3: detected capacity change from 0 to 128 [ 394.167436][T13728] System zones: 0-1, 3-36 [ 394.190302][T13728] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2550: bad orphan inode 134217728 [ 394.201835][T13728] loop2: lost filesystem error report for type 5 error -117 [ 394.204315][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 394.218101][ C1] EXT4-fs (loop2): initial error at time 1771964267: ext4_orphan_get:1417 [ 394.226644][ C1] EXT4-fs (loop2): last error at time 1771964267: ext4_orphan_get:1417 [ 394.236145][T13728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.406912][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.439513][T13740] lo speed is unknown, defaulting to 1000 [ 394.465697][T13740] lo speed is unknown, defaulting to 1000 [ 394.600677][T13752] netlink: 'syz.3.2559': attribute type 27 has an invalid length. [ 394.933544][T13752] vlan3: left promiscuous mode [ 394.939215][T13752] bond5: left promiscuous mode [ 394.944066][T13752] bridge2: left promiscuous mode [ 394.950490][T13752] vlan3: left allmulticast mode [ 394.956384][T13752] bond5: left allmulticast mode [ 394.961329][T13752] bridge2: left allmulticast mode [ 394.986468][ T28] kauditd_printk_skb: 720 callbacks suppressed [ 394.986507][ T28] audit: type=1400 audit(1771964268.459:33129): avc: denied { recv } for pid=13749 comm="syz.3.2559" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 395.037729][ T28] audit: type=1400 audit(1771964268.459:33130): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 395.064351][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 395.108975][T13767] netlink: 'syz.4.2561': attribute type 6 has an invalid length. [ 395.125154][T13757] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.178788][ T28] audit: type=1400 audit(1771964268.459:33131): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.211331][ T28] audit: type=1400 audit(1771964268.459:33132): avc: denied { open } for pid=3322 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.237190][ T28] audit: type=1400 audit(1771964268.459:33133): avc: denied { ioctl } for pid=3322 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.267197][T13757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.300412][ T28] audit: type=1400 audit(1771964268.459:33134): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 395.336659][ T28] audit: type=1400 audit(1771964268.549:33135): avc: denied { create } for pid=13765 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 395.356143][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2563'. [ 395.395832][T13762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.418938][T13773] loop8: detected capacity change from 0 to 512 [ 395.433451][ T28] audit: type=1400 audit(1771964268.639:33136): avc: denied { read write } for pid=12297 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.492536][ T28] audit: type=1400 audit(1771964268.639:33137): avc: denied { open } for pid=12297 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.537741][T13776] audit: audit_backlog=66 > audit_backlog_limit=64 [ 395.561133][T13773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.627179][T13787] loop3: detected capacity change from 0 to 512 [ 395.634224][T13773] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.676587][T13787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.731196][T13770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=13770 comm=syz.8.2563 [ 395.758366][T13787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.882611][T13787] ext4 filesystem being mounted at /554/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.921755][T13787] lo speed is unknown, defaulting to 1000 [ 395.949067][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.011454][T13787] lo speed is unknown, defaulting to 1000 [ 396.110804][T13801] xt_CT: No such helper "netbios-ns" [ 396.390849][T13782] SELinux: failed to load policy [ 396.418073][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.556497][T13827] loop2: detected capacity change from 0 to 1024 [ 396.564136][T13827] EXT4-fs: Ignoring removed orlov option [ 396.633516][T13827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.706104][T13827] io-wq is not configured for unbound workers [ 396.807971][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.921998][T13845] netlink: 4568 bytes leftover after parsing attributes in process `syz.8.2582'. [ 396.943555][T13845] netlink: 4568 bytes leftover after parsing attributes in process `syz.8.2582'. [ 397.053779][T13851] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2583'. [ 397.121267][T13849] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2583'. [ 397.242701][T13858] loop3: detected capacity change from 0 to 512 [ 397.450877][T13873] syzkaller1: entered promiscuous mode [ 397.478292][T13873] syzkaller1: entered allmulticast mode [ 397.589015][T13876] loop6: detected capacity change from 0 to 512 [ 397.626484][T13876] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 397.694524][T13876] EXT4-fs (loop6): mount failed [ 397.893129][T13876] loop6: detected capacity change from 0 to 2048 [ 397.952193][ T8062] loop6: p1 p3 p4 [ 397.974321][ T8062] loop6: p4 size 589824 extends beyond EOD, truncated [ 397.989685][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 398.011474][T13894] SELinux: failed to load policy [ 398.036476][T13876] loop6: p1 p3 p4 [ 398.063870][T13876] loop6: p4 size 589824 extends beyond EOD, truncated [ 398.097948][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2595'. [ 398.110111][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2595'. [ 398.207131][T13900] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 398.263617][T13905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=13905 comm=syz.2.2601 [ 398.295569][T13905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13905 comm=syz.2.2601 [ 398.338419][T13905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65 sclass=netlink_tcpdiag_socket pid=13905 comm=syz.2.2601 [ 398.362666][T13881] macvlan2: entered promiscuous mode [ 398.382300][T13881] macvlan2: entered allmulticast mode [ 398.395807][T13881] veth0_virt_wifi: entered allmulticast mode [ 398.412849][T13905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=63 sclass=netlink_tcpdiag_socket pid=13905 comm=syz.2.2601 [ 398.413942][T13905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61 sclass=netlink_tcpdiag_socket pid=13905 comm=syz.2.2601 [ 398.472582][T13912] loop4: detected capacity change from 0 to 1024 [ 398.659128][T13915] loop8: detected capacity change from 0 to 1024 [ 398.724560][T13915] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.855052][T13930] loop6: detected capacity change from 0 to 512 [ 398.885042][T13930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 398.914478][T13934] loop8: detected capacity change from 1024 to 1023 [ 398.921782][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.951249][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 398.964860][ T8356] udevd[8356]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 398.978171][ T8068] udevd[8068]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 399.001431][T13930] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2609: bg 0: block 393: padding at end of block bitmap is not set [ 399.052481][T13930] loop6: lost filesystem error report for type 5 error -117 [ 399.052738][T13930] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 399.060322][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 399.060340][ C1] EXT4-fs (loop6): initial error at time 1771964272: ext4_validate_block_bitmap:441 [ 399.060388][ C1] EXT4-fs (loop6): last error at time 1771964272: ext4_validate_block_bitmap:441 [ 399.096643][T13930] loop6: lost filesystem error report for type 5 error -117 [ 399.096912][T13930] EXT4-fs (loop6): 2 truncates cleaned up [ 399.111176][T13930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.145339][T13930] syz0: rxe_newlink: already configured on lo [ 399.333871][T11722] udevd[11722]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 399.339926][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 399.388147][ T8356] udevd[8356]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 399.543131][T13951] loop3: detected capacity change from 0 to 764 [ 399.607710][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.639560][T13951] all (unregistering): Released all slaves [ 399.892123][T13973] lo speed is unknown, defaulting to 1000 [ 399.964890][T13973] lo speed is unknown, defaulting to 1000 [ 399.998595][T13987] lo speed is unknown, defaulting to 1000 [ 400.038837][ T28] kauditd_printk_skb: 1416 callbacks suppressed [ 400.038853][ T28] audit: type=1400 audit(1771964273.509:34552): avc: denied { prog_load } for pid=13967 comm="syz.6.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.125826][ T28] audit: type=1400 audit(1771964273.539:34554): avc: denied { search } for pid=13990 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.213022][ T28] audit: type=1400 audit(1771964273.539:34555): avc: denied { search } for pid=13990 comm="rm" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.276892][T13987] lo speed is unknown, defaulting to 1000 [ 400.287177][ T28] audit: type=1400 audit(1771964273.539:34556): avc: denied { search } for pid=13990 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.361494][ T28] audit: type=1400 audit(1771964273.539:34557): avc: denied { getattr } for pid=13990 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=17875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 400.396428][T13973] tipc: can't start tipc receive workqueue [ 400.436985][T13999] audit: audit_backlog=65 > audit_backlog_limit=64 [ 400.443814][T14000] audit: audit_backlog=65 > audit_backlog_limit=64 [ 400.453958][ T28] audit: type=1400 audit(1771964273.539:34558): avc: denied { create } for pid=13992 comm="syz.2.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.471402][T13999] audit: audit_lost=348 audit_rate_limit=0 audit_backlog_limit=64 [ 400.476092][ T28] audit: type=1400 audit(1771964273.539:34553): avc: denied { prog_load } for pid=13983 comm="syz.3.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.871082][T13972] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 400.901713][ T8355] buffer_io_error: 4 callbacks suppressed [ 400.901729][ T8355] Buffer I/O error on dev loop9, logical block 1, async page read [ 400.901737][ C0] blk_print_req_error: 4 callbacks suppressed [ 400.901818][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.931110][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 400.953269][ T8355] Buffer I/O error on dev loop9, logical block 1, async page read [ 400.962482][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.972066][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 400.982983][ T8355] Buffer I/O error on dev loop9, logical block 1, async page read [ 400.991093][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 401.000705][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 401.009468][ T8355] Buffer I/O error on dev loop9, logical block 1, async page read [ 401.017843][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 401.027418][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 401.038778][ T8355] Buffer I/O error on dev loop9, logical block 1, async page read [ 401.050368][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 401.060058][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 401.126881][T14020] bridge0: port 1(macsec1) entered blocking state [ 401.157863][T14020] bridge0: port 1(macsec1) entered disabled state [ 401.185056][T14020] macsec1: entered allmulticast mode [ 401.242066][T14024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.246479][T14020] bridge0: entered allmulticast mode [ 401.265451][T14024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.309504][T14020] macsec1: left allmulticast mode [ 401.321907][T14020] bridge0: left allmulticast mode [ 401.449394][T14029] Invalid ELF header magic: != ELF [ 401.489625][T14029] random: crng reseeded on system resumption [ 402.182108][T14056] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14056 comm=syz.3.2642 [ 402.220876][T14053] lo speed is unknown, defaulting to 1000 [ 402.231792][T14053] lo speed is unknown, defaulting to 1000 [ 402.632680][ T118] Bluetooth: hci0: Frame reassembly failed (-84) [ 402.824262][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2646'. [ 402.835870][T14076] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 402.881770][T14079] netlink: 'syz.8.2646': attribute type 16 has an invalid length. [ 402.894431][T14076] bond4: (slave lo): Enslaving as an active interface with an up link [ 402.905846][T14079] netlink: 'syz.8.2646': attribute type 3 has an invalid length. [ 402.915646][T14076] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 402.931350][T14079] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.2646'. [ 403.442002][T14099] loop2: detected capacity change from 0 to 512 [ 403.532656][T14099] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 403.595808][T14099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 403.728588][T14099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 403.756703][T14099] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2652: bad orphan inode 267 [ 403.818115][T14099] loop2: lost filesystem error report for type 5 error -117 [ 403.818269][T14099] EXT4-fs (loop2): Remounting filesystem read-only [ 403.825659][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 403.825680][ C1] EXT4-fs (loop2): initial error at time 1771964277: ext4_orphan_get:1417 [ 403.825719][ C1] EXT4-fs (loop2): last error at time 1771964277: ext4_orphan_get:1417 [ 403.862731][T14099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 403.876228][T14099] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 404.150870][T14115] lo speed is unknown, defaulting to 1000 [ 404.167276][T14115] lo speed is unknown, defaulting to 1000 [ 404.180390][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 404.220055][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 404.337160][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'. [ 404.358812][T14129] hsr_slave_0: left promiscuous mode [ 404.364972][T14113] loop3: detected capacity change from 0 to 32768 [ 404.376680][T14129] hsr_slave_1: left promiscuous mode [ 404.664459][ T3525] Bluetooth: hci0: command 0x1003 tx timeout [ 404.664559][T13687] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 404.783610][T14153] loop2: detected capacity change from 0 to 1764 [ 404.810200][T14153] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 404.821480][T14151] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2667'. [ 404.844550][T14153] isofs_fill_super: get root inode failed [ 404.982588][T14161] loop4: detected capacity change from 0 to 1024 [ 405.018937][T14161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 405.028199][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 405.107739][ T28] kauditd_printk_skb: 850 callbacks suppressed [ 405.107755][ T28] audit: type=1400 audit(1771964278.579:35404): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.156145][T14161] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.164363][ T28] audit: type=1400 audit(1771964278.579:35405): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.219890][ T28] audit: type=1400 audit(1771964278.579:35406): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.274426][T14169] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.2669: Freeing blocks not in datazone - block = 0, count = 16 [ 405.311033][ T28] audit: type=1400 audit(1771964278.619:35407): avc: denied { recv } for pid=14150 comm="syz.8.2667" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 405.381846][ T28] audit: type=1400 audit(1771964278.619:35408): avc: denied { recv } for pid=14150 comm="syz.8.2667" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 405.495901][ T3322] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /507/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 405.516349][ T28] audit: type=1400 audit(1771964278.619:35409): avc: denied { recv } for pid=14150 comm="syz.8.2667" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 405.585859][ T3322] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /507/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 405.607727][ T28] audit: type=1400 audit(1771964278.619:35410): avc: denied { recv } for pid=2990 comm="klogd" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 405.653278][ T28] audit: type=1400 audit(1771964278.629:35411): avc: denied { mount } for pid=14159 comm="syz.4.2669" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 405.721769][ T3322] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 405.754115][ T28] audit: type=1400 audit(1771964278.719:35412): avc: denied { read write } for pid=14159 comm="syz.4.2669" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.779845][ T28] audit: type=1400 audit(1771964278.719:35413): avc: denied { open } for pid=14159 comm="syz.4.2669" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.805754][ T3322] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /507/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 405.875130][ T3322] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 405.921971][ T3322] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /507/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 405.957239][T14189] loop6: detected capacity change from 0 to 512 [ 405.984213][T14189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.001050][ T3322] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 406.022670][ T3322] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /507/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 406.058542][T14189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.109214][T14189] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.174999][ T3322] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 406.223642][T14194] loop8: detected capacity change from 0 to 256 [ 406.231952][T14194] vfat: Unknown parameter '' [ 406.239530][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2678'. [ 406.252111][T14194] vlan0: entered promiscuous mode [ 406.257249][T14194] veth0_to_bridge: entered promiscuous mode [ 406.282100][T14198] loop2: detected capacity change from 0 to 2048 [ 406.345056][T14198] loop2: p1 p2 [ 406.419795][T14201] Invalid ELF header magic: != ELF [ 406.504022][T14207] xt_hashlimit: size too large, truncated to 1048576 [ 406.751069][T14213] lo speed is unknown, defaulting to 1000 [ 406.798356][T14213] lo speed is unknown, defaulting to 1000 [ 406.821520][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.960398][T14221] loop6: detected capacity change from 0 to 1024 [ 406.982035][T14221] EXT4-fs: Ignoring removed orlov option [ 407.025591][T14221] EXT4-fs: Ignoring removed nobh option [ 407.069527][T14221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.164832][T14226] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 407.182718][T14223] IPVS: stopping master sync thread 14226 ... [ 407.188968][T12536] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 407.233832][T12536] EXT4-fs (loop4): This should not happen!! Data will be lost [ 407.233832][T12536] [ 407.245057][T12536] EXT4-fs (loop4): Total free blocks count 0 [ 407.251589][T12536] EXT4-fs (loop4): Free/Dirty block details [ 407.264906][T12536] EXT4-fs (loop4): free_blocks=16 [ 407.286719][T12536] EXT4-fs (loop4): dirty_blocks=16 [ 407.307009][T12536] EXT4-fs (loop4): Block reservation details [ 407.343579][T12536] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 407.357291][T11065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 407.608330][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.103099][T14255] loop8: detected capacity change from 0 to 512 [ 408.149867][T14255] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2691: bad orphan inode 15 [ 408.160160][T14255] loop8: lost filesystem error report for type 5 error -117 [ 408.160538][T14255] ext4_test_bit(bit=14, block=5) = 0 [ 408.167963][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 408.167987][ C0] EXT4-fs (loop8): initial error at time 1771964281: ext4_orphan_get:1417 [ 408.168016][ C0] EXT4-fs (loop8): last error at time 1771964281: ext4_orphan_get:1417 [ 408.209826][T14240] lo speed is unknown, defaulting to 1000 [ 408.224384][T14240] lo speed is unknown, defaulting to 1000 [ 408.269602][T14255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.332783][T14255] EXT4-fs error (device loop8): ext4_nfs_get_inode:1550: inode #17: comm syz.8.2691: iget: bad extra_isize 255 (inode size 256) [ 408.540123][T14240] chnl_net:caif_netlink_parms(): no params data found [ 408.683377][T14240] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.711178][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.724415][T14240] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.731684][T14240] bridge_slave_0: entered allmulticast mode [ 408.775048][T14240] bridge_slave_0: entered promiscuous mode [ 408.789328][T14240] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.854346][T14240] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.877871][T14240] bridge_slave_1: entered allmulticast mode [ 408.898205][T14240] bridge_slave_1: entered promiscuous mode [ 408.930798][T14277] bridge1: entered allmulticast mode [ 409.022973][T14240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.065863][T14240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.133173][T14240] team0: Port device team_slave_0 added [ 409.152568][T14240] team0: Port device team_slave_1 added [ 409.159637][T14286] loop8: detected capacity change from 0 to 2048 [ 409.200891][T14240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.208075][T14240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.244522][ T8062] loop8: p1 p2 [ 409.281052][T14286] loop8: p1 p2 [ 409.333221][T14240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.388764][T14240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.408588][T14240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.520982][T14296] xt_hashlimit: size too large, truncated to 1048576 [ 409.530998][T14240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.787167][T14240] hsr_slave_0: entered promiscuous mode [ 409.793538][T14240] hsr_slave_1: entered promiscuous mode [ 409.809354][T14240] debugfs: 'hsr0' already exists in 'hsr' [ 409.981605][T14305] loop6: detected capacity change from 0 to 512 [ 410.028705][T14305] EXT4-fs: Mount option(s) incompatible with ext2 [ 410.210965][ T28] kauditd_printk_skb: 730 callbacks suppressed [ 410.210990][ T28] audit: type=1400 audit(1771964283.679:36124): avc: denied { recv } for pid=14301 comm="syz.6.2700" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 410.348542][T14240] Cannot create hsr debugfs directory [ 410.470505][ T28] audit: type=1400 audit(1771964283.719:36125): avc: denied { recv } for pid=14301 comm="syz.6.2700" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 410.600145][ T28] audit: type=1400 audit(1771964283.769:36126): avc: denied { setopt } for pid=14299 comm="syz.2.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.680172][ T28] audit: type=1400 audit(1771964283.809:36127): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.710678][ T28] audit: type=1400 audit(1771964283.809:36128): avc: denied { read write open } for pid=3315 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.762563][ T28] audit: type=1400 audit(1771964283.819:36129): avc: denied { read write } for pid=14301 comm="syz.6.2700" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.788770][ T28] audit: type=1400 audit(1771964283.819:36130): avc: denied { read write open } for pid=14301 comm="syz.6.2700" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.814037][T14313] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2702'. [ 410.848273][ T28] audit: type=1400 audit(1771964283.819:36131): avc: denied { ioctl } for pid=14301 comm="syz.6.2700" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.874079][ T28] audit: type=1400 audit(1771964283.829:36132): avc: denied { module_request } for pid=14285 comm="syz.8.2697" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 410.946253][T14324] audit: audit_backlog=65 > audit_backlog_limit=64 [ 411.029351][T14323] lo speed is unknown, defaulting to 1000 [ 411.095173][T14323] lo speed is unknown, defaulting to 1000 [ 411.155494][T14328] v: renamed from ip6_vti0 (while UP) [ 411.216679][T14329] loop8: detected capacity change from 0 to 1024 [ 411.254432][T14326] lo speed is unknown, defaulting to 1000 [ 411.264504][T14240] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 411.297641][T14240] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 411.320178][T14329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.352057][T14326] lo speed is unknown, defaulting to 1000 [ 411.369937][T14240] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 411.462687][T14240] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 411.922181][T14240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.939050][T14240] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.948873][T12536] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.948964][T12536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.951617][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.951651][T12536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.962672][T14360] loop2: detected capacity change from 0 to 2048 [ 412.004892][ T8062] loop2: p1 p2 [ 412.026763][T14360] loop2: p1 p2 [ 412.141621][T14366] loop3: detected capacity change from 0 to 128 [ 412.141985][T14364] xt_hashlimit: size too large, truncated to 1048576 [ 412.227733][T14369] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2712'. [ 412.385240][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.611096][T14240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.712641][T14383] loop6: detected capacity change from 0 to 1024 [ 412.730499][T14383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.769018][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2713'. [ 412.781604][T14383] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.2714: missing EA_INODE flag [ 412.839420][T14383] EXT4-fs (loop6): Remounting filesystem read-only [ 412.867330][T14383] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 412.965617][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.998376][T14240] veth0_vlan: entered promiscuous mode [ 414.026042][T14422] loop8: detected capacity change from 0 to 2048 [ 414.085746][ T8355] loop8: p1 p2 [ 414.090086][T14240] veth1_vlan: entered promiscuous mode [ 414.106829][T14422] loop8: p1 p2 [ 414.242752][T14430] xt_hashlimit: size too large, truncated to 1048576 [ 414.259271][T14240] veth0_macvtap: entered promiscuous mode [ 414.298673][T14240] veth1_macvtap: entered promiscuous mode [ 414.326098][T14240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.373114][T14240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.412747][ T118] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.427941][ T118] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.467392][ T118] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.502943][ T118] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.891187][T14451] loop3: detected capacity change from 0 to 128 [ 415.215735][ T28] kauditd_printk_skb: 938 callbacks suppressed [ 415.215752][ T28] audit: type=1400 audit(1771964288.689:37048): avc: denied { mount } for pid=14459 comm="syz.9.2732" name="/" dev="ramfs" ino=40447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 415.261006][T14460] loop3: detected capacity change from 0 to 512 [ 415.263307][ T28] audit: type=1400 audit(1771964288.729:37049): avc: denied { prog_load } for pid=14456 comm="syz.8.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 415.368916][ T28] audit: type=1400 audit(1771964288.729:37050): avc: denied { perfmon } for pid=14456 comm="syz.8.2731" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 415.387061][T14458] audit: audit_backlog=65 > audit_backlog_limit=64 [ 415.412100][T14467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 415.412769][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 415.425226][ C0] audit: audit_lost=366 audit_rate_limit=0 audit_backlog_limit=64 [ 415.431472][T14467] audit: audit_lost=367 audit_rate_limit=0 audit_backlog_limit=64 [ 415.433054][ C0] audit: backlog limit exceeded [ 415.434361][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 415.536700][T14469] loop2: detected capacity change from 0 to 2048 [ 415.544706][T14467] loop6: detected capacity change from 0 to 1024 [ 415.584611][T14469] loop2: p1 p2 [ 415.596784][T14467] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 415.613869][T14467] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 415.671861][T14467] JBD2: no valid journal superblock found [ 415.708129][T14467] EXT4-fs (loop6): Could not load journal inode [ 415.729454][T14479] xt_hashlimit: size too large, truncated to 1048576 [ 416.196614][T14497] loop8: detected capacity change from 0 to 512 [ 416.221584][T14497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 416.290143][T14506] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2743'. [ 416.301950][T14497] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.314603][T14506] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2743'. [ 416.324041][T14497] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.346490][T14506] loop3: detected capacity change from 0 to 512 [ 416.363767][T14506] EXT4-fs: Ignoring removed nobh option [ 416.384538][T14506] ext3: Bad value for 'sb' [ 416.409912][T14494] Invalid ELF header magic: != ELF [ 416.821916][T14521] loop6: detected capacity change from 0 to 256 [ 417.017475][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.170118][T14535] sg_write: data in/out 196864/1 bytes for SCSI command 0x0-- guessing data in; [ 417.170118][T14535] program syz.3.2752 not setting count and/or reply_len properly [ 417.335737][T14535] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2752'. [ 418.255891][T14564] loop3: detected capacity change from 0 to 512 [ 418.263819][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2761'. [ 418.288291][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2761'. [ 418.297980][T14565] netlink: 'syz.6.2761': attribute type 6 has an invalid length. [ 418.307457][T14564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 418.309918][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2761'. [ 418.348681][T14564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.374749][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2761'. [ 418.383817][T14565] netlink: 'syz.6.2761': attribute type 6 has an invalid length. [ 418.416948][T14564] ext4 filesystem being mounted at /587/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.527579][T14580] loop6: detected capacity change from 0 to 1024 [ 418.566943][T14580] EXT4-fs: inline encryption not supported [ 418.603409][T14564] Invalid ELF header magic: != ELF [ 418.637137][T14580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.763427][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 418.921050][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.952051][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.208997][T14606] loop8: detected capacity change from 0 to 256 [ 419.261191][T14606] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.349604][T14606] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.012627][T14620] loop6: detected capacity change from 0 to 8192 [ 420.068478][ T8355] loop6: p1 p2 p3 [ 420.072363][ T8355] loop6: p1 size 4719617 extends beyond EOD, truncated [ 420.095268][ T8355] loop6: p3 start 117772289 is beyond EOD, truncated [ 420.115812][T14620] loop6: p1 p2 p3 [ 420.119626][T14620] loop6: p1 size 4719617 extends beyond EOD, truncated [ 420.133856][T14620] loop6: p3 start 117772289 is beyond EOD, truncated [ 420.183410][T14632] loop2: detected capacity change from 0 to 512 [ 420.227670][ T28] kauditd_printk_skb: 1262 callbacks suppressed [ 420.227751][ T28] audit: type=1326 audit(1771964293.699:38300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feae06fc629 code=0x7ffc0000 [ 420.286652][T14623] batman_adv: batadv0: Adding interface: dummy0 [ 420.306250][T14632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.309538][T14623] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.351321][ T28] audit: type=1400 audit(1771964293.699:38301): avc: denied { ioctl } for pid=14622 comm="syz.9.2779" path="socket:[40637]" dev="sockfs" ino=40637 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 420.434536][T14623] batman_adv: batadv0: Interface activated: dummy0 [ 420.445070][ T28] audit: type=1400 audit(1771964293.729:38302): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 420.509871][ T28] audit: type=1400 audit(1771964293.729:38303): avc: denied { recv } for pid=14622 comm="syz.9.2779" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 420.546333][T14627] batadv0: mtu less than device minimum [ 420.554914][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.566133][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.577043][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.586524][ T28] audit: type=1400 audit(1771964293.739:38304): avc: denied { recv } for pid=14622 comm="syz.9.2779" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 420.588489][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.623979][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.634963][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.645998][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.657098][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.668087][T14627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.696556][T14632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.736260][T14632] ext4 filesystem being mounted at /568/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.750091][ T28] audit: type=1400 audit(1771964293.739:38305): avc: denied { recv } for pid=8355 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 420.811762][T14632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 420.817905][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 420.818621][T14632] audit: audit_lost=373 audit_rate_limit=0 audit_backlog_limit=64 [ 420.836269][T14632] audit: backlog limit exceeded [ 420.837721][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 420.867660][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 420.888352][T14642] loop8: detected capacity change from 0 to 512 [ 420.925981][T14632] Invalid ELF header magic: != ELF [ 420.986144][T14654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.997256][T14654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.999497][T14653] loop3: detected capacity change from 0 to 512 [ 421.063402][T14653] EXT4-fs: Ignoring removed orlov option [ 421.099534][T14653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 421.129081][T14653] EXT4-fs (loop3): orphan cleanup on readonly fs [ 421.132233][T14656] loop9: detected capacity change from 0 to 512 [ 421.146074][T14656] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 421.185205][T14656] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.2789: invalid indirect mapped block 4294967295 (level 0) [ 421.199462][T14656] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 421.199630][T14656] EXT4-fs (loop9): Remounting filesystem read-only [ 421.208786][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 421.208808][ C0] EXT4-fs (loop9): initial error at time 1771964294: ext4_free_branches:1023: inode 16 [ 421.208842][ C0] EXT4-fs (loop9): last error at time 1771964294: ext4_free_branches:1023: inode 16 [ 421.251689][T14653] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2788: bg 0: block 248: padding at end of block bitmap is not set [ 421.266824][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 421.277795][ T8356] udevd[8356]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 421.315710][T14656] EXT4-fs (loop9): 1 orphan inode deleted [ 421.321524][T14656] EXT4-fs (loop9): 1 truncate cleaned up [ 421.327813][T14656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.332872][T14653] loop3: lost filesystem error report for type 5 error -117 [ 421.374316][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 421.388120][ C1] EXT4-fs (loop3): last error at time 1771964294: ext4_validate_block_bitmap:441 [ 421.398597][T14653] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.2788: Failed to acquire dquot type 1 [ 421.410807][T14653] loop3: lost filesystem error report for type 5 error -117 [ 421.427412][T14240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.428404][T14653] EXT4-fs (loop3): 1 truncate cleaned up [ 421.496672][T14653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.600429][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.685577][T14660] lo speed is unknown, defaulting to 1000 [ 421.709908][T14660] lo speed is unknown, defaulting to 1000 [ 421.728392][T14662] netlink: 1028 bytes leftover after parsing attributes in process `syz.8.2791'. [ 421.820582][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.141356][T14681] tipc: Enabled bearer , priority 2 [ 422.179809][T14682] tipc: Enabling of bearer rejected, already enabled [ 422.371762][T14700] loop8: detected capacity change from 0 to 1024 [ 422.394075][T14700] EXT4-fs: Ignoring removed orlov option [ 422.413020][T14700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.440909][T14704] loop9: detected capacity change from 0 to 512 [ 422.458791][T14704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 422.501006][T14704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.547763][T14704] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.645267][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.318414][T14704] Invalid ELF header magic: != ELF [ 423.391020][T14731] loop8: detected capacity change from 0 to 128 [ 423.557806][T14736] loop2: detected capacity change from 0 to 256 [ 423.633717][T14740] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2812'. [ 423.805726][T14240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.862818][T14736] FAT-fs (loop2): Directory bread(block 64) failed [ 423.883697][T14736] FAT-fs (loop2): Directory bread(block 65) failed [ 423.902247][T14736] FAT-fs (loop2): Directory bread(block 66) failed [ 423.929123][T14736] FAT-fs (loop2): Directory bread(block 67) failed [ 423.960037][T14736] FAT-fs (loop2): Directory bread(block 68) failed [ 423.994524][T14736] FAT-fs (loop2): Directory bread(block 69) failed [ 424.001105][T14736] FAT-fs (loop2): Directory bread(block 70) failed [ 424.044445][T14736] FAT-fs (loop2): Directory bread(block 71) failed [ 424.072107][T14736] FAT-fs (loop2): Directory bread(block 72) failed [ 424.088110][T14736] FAT-fs (loop2): Directory bread(block 73) failed [ 424.378250][T14755] lo speed is unknown, defaulting to 1000 [ 424.402601][T14755] lo speed is unknown, defaulting to 1000 [ 424.882460][T14763] lo speed is unknown, defaulting to 1000 [ 424.905478][T14763] lo speed is unknown, defaulting to 1000 [ 425.070584][T14794] loop8: detected capacity change from 0 to 512 [ 425.121739][T14794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.265695][T14794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.302609][ T28] kauditd_printk_skb: 1013 callbacks suppressed [ 425.302685][ T28] audit: type=1400 audit(1771964298.769:39246): avc: denied { create } for pid=14798 comm="syz.6.2826" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 425.344785][T14794] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.355608][ T28] audit: type=1400 audit(1771964298.769:39247): avc: denied { map } for pid=14798 comm="syz.6.2826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 425.381272][ T28] audit: type=1400 audit(1771964298.769:39248): avc: denied { read write } for pid=14798 comm="syz.6.2826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 425.419105][ T28] audit: type=1400 audit(1771964298.789:39249): avc: denied { map } for pid=14798 comm="syz.6.2826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 425.445943][ T28] audit: type=1400 audit(1771964298.789:39250): avc: denied { read write } for pid=14798 comm="syz.6.2826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 425.472553][ T28] audit: type=1400 audit(1771964298.819:39251): avc: denied { mount } for pid=14793 comm="syz.8.2824" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 425.584100][T14810] Invalid ELF header magic: != ELF [ 425.686405][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.693127][ C0] audit: audit_lost=398 audit_rate_limit=0 audit_backlog_limit=64 [ 425.701001][ C0] audit: backlog limit exceeded [ 425.706597][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.837173][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 425.863516][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.875228][T14763] chnl_net:caif_netlink_parms(): no params data found [ 425.922472][T14817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2827'. [ 425.968650][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2827'. [ 426.109024][T14763] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.159059][T14763] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.197462][T14763] bridge_slave_0: entered allmulticast mode [ 426.204100][T14763] bridge_slave_0: entered promiscuous mode [ 426.263814][T14763] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.303339][T14763] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.335573][T14763] bridge_slave_1: entered allmulticast mode [ 426.355212][T14763] bridge_slave_1: entered promiscuous mode [ 426.377615][T14763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.390138][T14763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.429985][T14763] team0: Port device team_slave_0 added [ 426.447366][T14763] team0: Port device team_slave_1 added [ 426.477130][T14763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.529121][T14763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.620739][T14763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.673872][T14763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.704320][T14763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.794358][T14763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.870398][T14763] hsr_slave_0: entered promiscuous mode [ 426.896106][T14763] hsr_slave_1: entered promiscuous mode [ 426.902163][T14763] debugfs: 'hsr0' already exists in 'hsr' [ 426.924389][T14763] Cannot create hsr debugfs directory [ 427.020469][T14837] loop2: detected capacity change from 0 to 2048 [ 427.067046][T14831] loop8: detected capacity change from 0 to 512 [ 427.119089][T14837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.192147][T14831] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 427.218965][T14831] EXT4-fs (loop8): 1 truncate cleaned up [ 427.230743][T14831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.297455][T14763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.343942][T14763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.364931][T14840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.392541][T14763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.413280][T14763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.550257][T14831] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2828'. [ 427.776272][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.828696][T14763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.968130][T14763] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.011999][ T2221] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.019184][ T2221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.067235][ T2221] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.074515][ T2221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.850303][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2841'. [ 428.859446][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2841'. [ 428.871459][T14877] syz_tun: entered promiscuous mode [ 428.927536][T14877] syz_tun: left promiscuous mode [ 429.030729][T14763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.188410][T14887] loop8: detected capacity change from 0 to 1024 [ 429.245809][T14887] ext4: Unknown parameter 'uid>00000000000000000000' [ 429.467476][T14900] net_ratelimit: 10 callbacks suppressed [ 429.467491][T14900] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 429.511253][T14901] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2844'. [ 429.675633][T14914] loop8: detected capacity change from 0 to 512 [ 429.708671][T14914] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 429.726241][T14763] veth0_vlan: entered promiscuous mode [ 429.740948][T14914] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 429.768687][T14763] veth1_vlan: entered promiscuous mode [ 429.785337][T14914] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2846: bg 0: block 248: padding at end of block bitmap is not set [ 429.884353][T14914] loop8: lost filesystem error report for type 5 error -117 [ 429.884595][T14914] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2846: Failed to acquire dquot type 1 [ 429.903186][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 429.903216][ C1] EXT4-fs (loop8): last error at time 1771964303: ext4_validate_block_bitmap:441 [ 430.018419][T14763] veth0_macvtap: entered promiscuous mode [ 430.054392][T14914] loop8: lost filesystem error report for type 5 error -117 [ 430.054856][T14914] EXT4-fs (loop8): 1 truncate cleaned up [ 430.080829][T14763] veth1_macvtap: entered promiscuous mode [ 430.105910][T14914] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 430.169919][T14763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.252042][T14763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.323448][ T28] kauditd_printk_skb: 6659 callbacks suppressed [ 430.323473][ T28] audit: type=1400 audit(1771964303.789:45775): avc: denied { search } for pid=14937 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.396589][T14939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.405178][T14939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.692580][ T28] audit: type=1400 audit(1771964303.859:45776): avc: denied { read write } for pid=14929 comm="syz.6.2849" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 430.791778][ T28] audit: type=1400 audit(1771964303.869:45777): avc: denied { open } for pid=14929 comm="syz.6.2849" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 430.835688][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.846137][ T28] audit: type=1400 audit(1771964303.869:45778): avc: denied { ioctl } for pid=14929 comm="syz.6.2849" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 430.861260][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 430.882838][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.906675][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.916178][ T28] audit: type=1400 audit(1771964303.909:45779): avc: denied { recv } for pid=14932 comm="syz.2.2850" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 430.941780][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.958021][ T28] audit: type=1400 audit(1771964303.909:45780): avc: denied { prog_load } for pid=14932 comm="syz.2.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 430.982140][ T28] audit: type=1400 audit(1771964303.909:45781): avc: denied { bpf } for pid=14932 comm="syz.2.2850" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 431.004196][ T28] audit: type=1400 audit(1771964303.909:45782): avc: denied { search } for pid=14937 comm="rm" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.085239][ T28] audit: type=1400 audit(1771964303.909:45783): avc: denied { search } for pid=14937 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.149271][ T28] audit: type=1400 audit(1771964303.909:45784): avc: denied { getattr } for pid=14937 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=19171 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.185078][T14948] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.2851'. [ 431.225986][T14948] netlink: zone id is out of range [ 431.240410][T14948] netlink: zone id is out of range [ 431.257034][T14948] netlink: zone id is out of range [ 431.267176][T14949] lo speed is unknown, defaulting to 1000 [ 431.283878][T14949] lo speed is unknown, defaulting to 1000 [ 431.303953][T14948] netlink: set zone limit has 8 unknown bytes [ 431.510124][T14948] loop8: detected capacity change from 0 to 512 [ 431.562397][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2855'. [ 431.593946][T14948] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.170636][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.448520][T14974] loop2: detected capacity change from 0 to 164 [ 432.476883][T14974] iso9660: Unknown parameter '' [ 432.506903][T14974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2858'. [ 432.576036][ T3403] IPVS: starting estimator thread 0... [ 432.684407][T14985] IPVS: using max 2640 ests per chain, 132000 per kthread [ 433.212997][T14990] lo speed is unknown, defaulting to 1000 [ 433.237276][T14996] loop6: detected capacity change from 0 to 1024 [ 433.298106][T14996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.306106][T14998] loop2: detected capacity change from 0 to 512 [ 433.348220][T14990] lo speed is unknown, defaulting to 1000 [ 433.367707][T14994] lo speed is unknown, defaulting to 1000 [ 433.465355][T14998] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 433.485483][T14998] System zones: 0-2, 18-18, 34-34 [ 433.521681][T14998] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 433.564125][T14998] EXT4-fs (loop2): Remounting filesystem read-only [ 433.570726][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 433.570753][ C0] EXT4-fs (loop2): initial error at time 1771964307: ext4_mb_generate_buddy:1315 [ 433.570781][ C0] EXT4-fs (loop2): last error at time 1771964307: ext4_mb_generate_buddy:1315 [ 433.598248][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.598893][T14998] EXT4-fs (loop2): 1 truncate cleaned up [ 433.616128][ T2221] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 433.627679][ T2221] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 433.659160][ T2221] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 433.690905][T14998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.748141][T14994] lo speed is unknown, defaulting to 1000 [ 433.789088][T14998] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.866768][T14998] v: renamed from ip6_vti0 (while UP) [ 434.156693][T15025] loop3: detected capacity change from 0 to 2048 [ 434.215201][T15025] loop3: p1 p2 [ 434.382416][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 434.421233][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 434.540148][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 434.543496][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 434.729171][T15036] loop3: detected capacity change from 0 to 764 [ 434.780826][T15036] Symlink component flag not implemented [ 434.790266][T15036] Symlink component flag not implemented (116) [ 434.792168][T15038] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2874'. [ 434.854211][T15038] Invalid option length (64208) for dns_resolver key [ 434.977436][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.204445][T15044] loop6: detected capacity change from 0 to 1024 [ 435.217202][T15044] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 435.374390][ T28] kauditd_printk_skb: 652 callbacks suppressed [ 435.374415][ T28] audit: type=1400 audit(1771964308.779:46429): avc: denied { map_create } for pid=15045 comm="syz.2.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 435.417247][T15044] System zones: 0-1, 3-36 [ 435.500495][T15044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.569050][ T28] audit: type=1400 audit(1771964309.039:46430): avc: denied { mount } for pid=15043 comm="syz.6.2877" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 435.769020][ T28] audit: type=1400 audit(1771964309.069:46431): avc: denied { read write } for pid=15043 comm="syz.6.2877" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.797329][ T28] audit: type=1400 audit(1771964309.069:46432): avc: denied { open } for pid=15043 comm="syz.6.2877" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.823454][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.910385][ T28] audit: type=1400 audit(1771964309.089:46433): avc: denied { setattr } for pid=15043 comm="syz.6.2877" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.009274][ T28] audit: type=1400 audit(1771964309.209:46434): avc: denied { recv } for pid=3302 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 436.036194][ T28] audit: type=1400 audit(1771964309.209:46435): avc: denied { recv } for pid=3302 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 436.066271][T15059] lo speed is unknown, defaulting to 1000 [ 436.072361][T15059] lo speed is unknown, defaulting to 1000 [ 436.086835][T15058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 436.093411][T15058] audit: audit_lost=444 audit_rate_limit=0 audit_backlog_limit=64 [ 436.110518][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 436.220482][T15063] loop2: detected capacity change from 0 to 2048 [ 436.280865][T15068] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2882'. [ 436.297032][T15063] loop2: p1 p2 [ 436.446949][T15073] xt_hashlimit: size too large, truncated to 1048576 [ 436.666134][T15059] loop3: detected capacity change from 0 to 1024 [ 436.729288][T15059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.742407][T15081] loop6: detected capacity change from 0 to 1024 [ 436.825790][T15081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.255688][T14763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.307423][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.340636][T15097] loop8: detected capacity change from 0 to 512 [ 437.390913][T15097] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 437.428415][T15097] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size [ 437.639300][T15105] loop6: detected capacity change from 0 to 4096 [ 437.824589][T15110] lo speed is unknown, defaulting to 1000 [ 437.837700][T15111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15111 comm=syz.6.2890 [ 437.869563][T15110] lo speed is unknown, defaulting to 1000 [ 439.117468][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2893'. [ 439.168778][T15126] netlink: 'syz.2.2895': attribute type 1 has an invalid length. [ 439.402401][T15136] loop8: detected capacity change from 0 to 2048 [ 439.500444][T15136] loop8: p1 p2 [ 439.560730][T15137] loop2: detected capacity change from 0 to 164 [ 439.600691][T15137] Unable to read rock-ridge attributes [ 439.630277][T15137] Unable to read rock-ridge attributes [ 439.636698][T15143] xt_hashlimit: size too large, truncated to 1048576 [ 439.660934][T15137] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 440.299741][T15158] loop3: detected capacity change from 0 to 164 [ 440.352837][T15161] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2904'. [ 440.374665][T15158] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 440.384975][ T28] kauditd_printk_skb: 1313 callbacks suppressed [ 440.384991][ T28] audit: type=1400 audit(1771964313.859:47728): avc: denied { write } for pid=15118 comm="syz.6.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 440.473990][ T28] audit: type=1400 audit(1771964313.869:47729): avc: denied { write } for pid=15090 comm="syz.9.2886" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.513835][ T28] audit: type=1400 audit(1771964313.869:47730): avc: denied { write } for pid=15090 comm="syz.9.2886" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.548216][T15164] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.559961][T15094] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.572727][T15164] audit: audit_lost=452 audit_rate_limit=0 audit_backlog_limit=64 [ 440.590820][T15094] audit: audit_lost=453 audit_rate_limit=0 audit_backlog_limit=64 [ 440.612486][T15164] audit: backlog limit exceeded [ 440.617594][T15094] audit: backlog limit exceeded [ 440.626545][T14763] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.708538][ T50] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 440.745852][T15167] loop3: detected capacity change from 0 to 1024 [ 440.788477][T15167] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 440.824628][T15167] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 440.839686][T15167] EXT4-fs (loop3): orphan cleanup on readonly fs [ 440.861469][T15167] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.2906: Bad quota inum: 2, type: 0 [ 440.900875][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.912663][T15167] loop3: lost filesystem error report for type 5 error -117 [ 440.912758][T15167] EXT4-fs (loop3): Remounting filesystem read-only [ 440.920115][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 440.920131][ C1] EXT4-fs (loop3): initial error at time 1771964314: ext4_quota_enable:7188 [ 440.920158][ C1] EXT4-fs (loop3): last error at time 1771964314: ext4_quota_enable:7188 [ 440.975692][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.017034][ T50] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 441.036516][ T50] bond0 (unregistering): Released all slaves [ 441.044535][ T50] bond1 (unregistering): Released all slaves [ 441.047256][T15167] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 441.067521][ T50] bond2 (unregistering): Released all slaves [ 441.078058][T15167] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 441.092635][T15167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 441.108622][ T50] bond3 (unregistering): Released all slaves [ 441.194425][ T50] tipc: Disabling bearer [ 441.250328][ T50] tipc: Disabling bearer [ 441.258945][ T50] tipc: Left network mode [ 441.410729][ T50] IPVS: stopping backup sync thread 5248 ... [ 441.566334][T15153] lo speed is unknown, defaulting to 1000 [ 441.573606][T15153] lo speed is unknown, defaulting to 1000 [ 441.643053][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.695446][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.837528][T15196] netlink: 'syz.8.2911': attribute type 3 has an invalid length. [ 441.967555][T14763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.009318][T15208] loop8: detected capacity change from 0 to 2048 [ 442.032764][ T50] team0 (unregistering): Port device team_slave_1 removed [ 442.054587][T15208] loop8: p1 p2 [ 442.059632][ T50] team0 (unregistering): Port device team_slave_0 removed [ 442.144885][ T3002] loop8: p1 p2 [ 442.163845][T15216] xt_hashlimit: size too large, truncated to 1048576 [ 442.265084][T15212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.687316][T15237] loop6: detected capacity change from 0 to 512 [ 442.724123][T15237] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2921: inode has both inline data and extents flags [ 442.818161][T15153] chnl_net:caif_netlink_parms(): no params data found [ 442.837189][T15237] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 442.844458][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 442.860445][ C1] EXT4-fs (loop6): initial error at time 1771964316: ext4_orphan_get:1391: inode 15 [ 442.870083][ C1] EXT4-fs (loop6): last error at time 1771964316: ext4_orphan_get:1391: inode 15 [ 442.884406][T15237] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2921: couldn't read orphan inode 15 (err -117) [ 442.942729][T15237] loop6: lost filesystem error report for type 5 error -117 [ 442.960404][T15237] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.009701][T15248] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 443.057417][T15248] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 443.095854][T15248] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 443.103640][T15248] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 443.153033][T15248] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 443.272951][T15248] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 443.290307][T15248] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 443.308975][T15248] netlink: 'syz.8.2923': attribute type 3 has an invalid length. [ 443.908324][T15153] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.935456][T11722] udevd[11722]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 443.947140][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.953217][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 443.977308][T15153] bridge_slave_0: entered allmulticast mode [ 443.983905][T15153] bridge_slave_0: entered promiscuous mode [ 443.998323][T15153] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.024663][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.031862][T15153] bridge_slave_1: entered allmulticast mode [ 444.038432][ T118] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 444.045889][T15153] bridge_slave_1: entered promiscuous mode [ 444.075039][T15153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.095605][T15153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.168128][ T4876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.185804][T15270] loop8: detected capacity change from 0 to 512 [ 444.213139][T15153] team0: Port device team_slave_0 added [ 444.227820][T15270] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.2925: corrupted inode contents [ 444.242799][T15274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2927'. [ 444.261955][T15270] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 444.262137][T15270] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 444.271424][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 444.271446][ C0] EXT4-fs (loop8): initial error at time 1771964317: ext4_do_update_inode:5569: inode 15 [ 444.271497][ C0] EXT4-fs (loop8): last error at time 1771964317: ext4_do_update_inode:5569: inode 15 [ 444.282928][T15153] team0: Port device team_slave_1 added [ 444.310819][T15270] loop8: lost filesystem error report for type 5 error -117 [ 444.324235][T15270] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.2925: corrupted inode contents [ 444.374638][T15270] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 444.376735][T15270] EXT4-fs error (device loop8): ext4_evict_inode:303: inode #15: comm syz.8.2925: mark_inode_dirty error [ 444.534447][T15270] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 444.548960][T15281] loop6: detected capacity change from 0 to 764 [ 444.565248][T15270] EXT4-fs (loop8): 1 orphan inode deleted [ 444.571360][T15270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.111314][ T12] tipc: Subscription rejected, illegal request [ 445.179301][T15153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.245319][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.379568][T15153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.423346][ T28] kauditd_printk_skb: 1961 callbacks suppressed [ 445.423361][ T28] audit: type=1400 audit(1771964318.829:49270): avc: denied { recv } for pid=15279 comm="syz.3.2928" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 445.479527][T15153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.501053][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.524422][ T28] audit: type=1400 audit(1771964318.829:49271): avc: denied { recv } for pid=15279 comm="syz.3.2928" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 445.626242][ T28] audit: type=1400 audit(1771964318.869:49272): avc: denied { search } for pid=15296 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.660417][T15153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.731476][T15303] loop9: detected capacity change from 0 to 2048 [ 445.747711][ T28] audit: type=1400 audit(1771964318.869:49273): avc: denied { read } for pid=15296 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 445.774693][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.794626][T15303] loop9: p1 p2 [ 445.830794][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 445.849832][ T28] audit: type=1400 audit(1771964318.869:49274): avc: denied { open } for pid=15296 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 445.855875][ T3042] audit: audit_lost=595 audit_rate_limit=0 audit_backlog_limit=64 [ 445.902930][ T28] audit: type=1400 audit(1771964318.869:49275): avc: denied { search } for pid=15296 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.965692][T15309] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 445.971209][ T3042] audit: backlog limit exceeded [ 445.994433][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.115984][T15314] xt_hashlimit: size too large, truncated to 1048576 [ 446.164944][T15309] bond1 (unregistering): Released all slaves [ 446.237421][T15322] kernel profiling enabled (shift: 9) [ 446.480516][T15318] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2933'. [ 446.660670][T15153] hsr_slave_0: entered promiscuous mode [ 446.703475][T15153] hsr_slave_1: entered promiscuous mode [ 446.734090][T15153] debugfs: 'hsr0' already exists in 'hsr' [ 446.834770][T15153] Cannot create hsr debugfs directory [ 447.301510][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 447.316724][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 447.546455][T15326] lo speed is unknown, defaulting to 1000 [ 447.552608][T15326] lo speed is unknown, defaulting to 1000 [ 447.724091][T15372] loop9: detected capacity change from 0 to 8192 [ 447.820176][ T8062] loop9: p1 p3 p4 [ 447.824003][ T8062] loop9: p1 size 196608 extends beyond EOD, truncated [ 447.867467][ T8062] loop9: p3 size 66846464 extends beyond EOD, truncated [ 447.905235][ T8062] loop9: p4 size 479744 extends beyond EOD, truncated [ 447.960676][T15372] loop9: p1 p3 p4 [ 447.977986][T15372] loop9: p1 size 196608 extends beyond EOD, truncated [ 448.020784][T15372] loop9: p3 size 66846464 extends beyond EOD, truncated [ 448.068534][T15372] loop9: p4 size 479744 extends beyond EOD, truncated [ 448.217447][T15153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.405101][T15153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.451925][T15153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.557166][T15326] chnl_net:caif_netlink_parms(): no params data found [ 448.672056][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 448.695742][T15153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.740459][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 449.190276][T10871] udevd[10871]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 449.268501][T15425] geneve2: entered allmulticast mode [ 449.299976][T15326] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.309365][T15326] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.316742][T15326] bridge_slave_0: entered allmulticast mode [ 449.323317][T15326] bridge_slave_0: entered promiscuous mode [ 449.347062][T15326] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.354405][T15326] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.361805][T15326] bridge_slave_1: entered allmulticast mode [ 449.370590][T15326] bridge_slave_1: entered promiscuous mode [ 449.408190][T15326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.439375][T15326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.469625][T15326] team0: Port device team_slave_0 added [ 449.511844][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 449.538663][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 449.569550][T15326] team0: Port device team_slave_1 added [ 449.596218][T10871] udevd[10871]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 449.728020][T15326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.740333][T15326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.803127][T15326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.828280][T15446] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 449.907024][T15450] validate_nla: 42 callbacks suppressed [ 449.907108][T15450] netlink: 'syz.8.2952': attribute type 10 has an invalid length. [ 449.933154][ T8062] udevd[8062]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 449.956478][T15326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.982842][T15326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.056529][T15451] loop3: detected capacity change from 0 to 764 [ 450.100995][ T965] tipc: Subscription rejected, illegal request [ 450.110637][T15326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.195580][T15423] Process accounting resumed [ 450.204496][T15450] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 450.344875][T15462] loop9: detected capacity change from 0 to 512 [ 450.362570][T15462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.387250][T15153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.424970][T15462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.438416][ T28] kauditd_printk_skb: 1042 callbacks suppressed [ 450.438434][ T28] audit: type=1400 audit(1771964323.919:50307): avc: denied { search } for pid=15464 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.466731][T15462] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.487884][T15326] hsr_slave_0: entered promiscuous mode [ 450.494455][T15326] hsr_slave_1: entered promiscuous mode [ 450.500453][T15326] debugfs: 'hsr0' already exists in 'hsr' [ 450.506758][ T28] audit: type=1400 audit(1771964323.919:50308): avc: denied { read } for pid=15464 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.524453][T15326] Cannot create hsr debugfs directory [ 450.528934][ T28] audit: type=1400 audit(1771964323.919:50309): avc: denied { open } for pid=15464 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.587946][ T28] audit: type=1400 audit(1771964323.919:50310): avc: denied { getattr } for pid=15464 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.635943][T15153] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.657889][T15462] Invalid ELF header magic: != ELF [ 450.684558][ T28] audit: type=1400 audit(1771964323.919:50311): avc: denied { getattr } for pid=15464 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth14.link" dev="tmpfs" ino=19878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.805928][ T2221] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.813099][ T2221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.822085][ T28] audit: type=1400 audit(1771964323.939:50312): avc: denied { mount } for pid=15460 comm="syz.9.2955" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 450.891186][ T28] audit: type=1400 audit(1771964324.039:50313): avc: denied { search } for pid=15468 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.892736][T15480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 450.931911][T14240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 450.940544][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 450.967935][T14240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.995598][ T2221] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.002704][ T2221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.889921][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.961948][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.993262][T15480] lo speed is unknown, defaulting to 1000 [ 452.001137][T15480] lo speed is unknown, defaulting to 1000 [ 452.103802][T15527] 9p: Bad value for 'rfdno' [ 452.211749][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.300175][T15153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.340705][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2963'. [ 452.403840][T15530] bridge0: Device is already in use. [ 452.467950][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.866957][T15326] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 452.910323][T15326] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 453.014932][T15533] loop8: detected capacity change from 0 to 1024 [ 453.028699][ T50] bridge_slave_1: left allmulticast mode [ 453.044369][ T50] bridge_slave_1: left promiscuous mode [ 453.050117][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.134619][ T50] bridge_slave_0: left allmulticast mode [ 453.140381][ T50] bridge_slave_0: left promiscuous mode [ 453.164590][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.173604][ T50] bridge_slave_1: left promiscuous mode [ 453.194482][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.225264][ T50] bridge_slave_0: left allmulticast mode [ 453.231125][ T50] bridge_slave_0: left promiscuous mode [ 453.243648][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.417253][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.439147][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.459562][ T50] bond0 (unregistering): Released all slaves [ 453.500448][ T50] erspan0 (unregistering): left promiscuous mode [ 453.520502][ T50] gretap0 (unregistering): left promiscuous mode [ 453.692345][T12297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 453.703814][T12297] CPU: 0 UID: 0 PID: 12297 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 453.703839][T12297] Tainted: [W]=WARN [ 453.703898][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.703908][T12297] Call Trace: [ 453.703914][T12297] [ 453.703921][T12297] __dump_stack+0x1d/0x30 [ 453.703942][T12297] dump_stack_lvl+0x95/0xd0 [ 453.704019][T12297] dump_stack+0x15/0x1b [ 453.704036][T12297] dump_header+0x80/0x240 [ 453.704119][T12297] oom_kill_process+0x295/0x350 [ 453.704135][T12297] out_of_memory+0x97d/0xb80 [ 453.704204][T12297] try_charge_memcg+0x62e/0xa10 [ 453.704243][T12297] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 453.704380][T12297] __swap_cache_prepare_and_add+0x386/0x530 [ 453.704419][T12297] swap_cache_alloc_folio+0xa2/0x120 [ 453.704451][T12297] swap_cluster_readahead+0x36b/0x3d0 [ 453.704551][T12297] swapin_readahead+0xde/0x840 [ 453.704582][T12297] ? __rcu_read_unlock+0x4e/0x70 [ 453.704602][T12297] ? __perf_event_task_sched_in+0xa65/0xad0 [ 453.704685][T12297] ? __list_add_valid_or_report+0x38/0xe0 [ 453.704712][T12297] ? __rcu_read_unlock+0x4e/0x70 [ 453.704730][T12297] ? swap_cache_get_folio+0x26f/0x280 [ 453.704766][T12297] do_swap_page+0x309/0x2210 [ 453.704799][T12297] ? __schedule+0x85a/0xd40 [ 453.704826][T12297] ? __rcu_read_lock+0x36/0x50 [ 453.704903][T12297] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 453.705012][T12297] handle_mm_fault+0xb40/0x3020 [ 453.705103][T12297] ? vma_start_read+0x1c7/0x2c0 [ 453.705136][T12297] do_user_addr_fault+0x62f/0x1050 [ 453.705167][T12297] ? trace_page_fault_user+0x1f/0xe0 [ 453.705209][T12297] exc_page_fault+0x62/0xa0 [ 453.705309][T12297] asm_exc_page_fault+0x26/0x30 [ 453.705393][T12297] RIP: 0033:0x7fb2bcec7817 [ 453.705431][T12297] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 453.705455][T12297] RSP: 002b:00007ffd0e368f10 EFLAGS: 00010202 [ 453.705477][T12297] RAX: 0000000000000000 RBX: 000055556fd0b500 RCX: 00007fb2bcec7817 [ 453.705494][T12297] RDX: 00007ffd0e368f50 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.705511][T12297] RBP: 00007ffd0e368fbc R08: 0000000000000000 R09: 0000000000000000 [ 453.705608][T12297] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 453.705621][T12297] R13: 00000000000927c0 R14: 000000000006e9e0 R15: 00007ffd0e369010 [ 453.705641][T12297] [ 453.947742][T12297] memory: usage 307200kB, limit 307200kB, failcnt 230 [ 453.954664][T12297] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 453.963580][T12297] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 453.971054][T12297] Memory cgroup stats for /syz8: [ 453.971398][T12297] cache 0 [ 453.979358][T12297] rss 4096 [ 453.982382][T12297] shmem 0 [ 453.985413][T12297] mapped_file 0 [ 453.988906][T12297] dirty 0 [ 453.992172][T12297] writeback 0 [ 453.995520][T12297] workingset_refault_anon 1573 [ 454.000332][T12297] workingset_refault_file 0 [ 454.004898][T12297] swap 237568 [ 454.008234][T12297] swapcached 7348224 [ 454.012162][T12297] pgpgin 110143 [ 454.015669][T12297] pgpgout 110140 [ 454.019333][T12297] pgfault 130177 [ 454.022874][T12297] pgmajfault 217 [ 454.027011][T12297] inactive_anon 0 [ 454.030651][T12297] active_anon 0 [ 454.034104][T12297] inactive_file 0 [ 454.037825][T12297] active_file 8192 [ 454.041581][T12297] unevictable 0 [ 454.045132][T12297] hierarchical_memory_limit 314572800 [ 454.050532][T12297] hierarchical_memsw_limit 9223372036854771712 [ 454.051000][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.056726][T12297] total_cache 0 [ 454.056736][T12297] total_rss 4096 [ 454.056744][T12297] total_shmem 0 [ 454.056752][T12297] total_mapped_file 0 [ 454.079921][T12297] total_dirty 0 [ 454.083427][T12297] total_writeback 0 [ 454.083823][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.087280][T12297] total_workingset_refault_anon 1573 [ 454.101337][T12297] total_workingset_refault_file 0 [ 454.103027][ T50] bond0 (unregistering): Released all slaves [ 454.106520][T12297] total_swap 237568 [ 454.116385][T12297] total_swapcached 7348224 [ 454.118166][ T50] bond1 (unregistering): Released all slaves [ 454.120818][T12297] total_pgpgin 110143 [ 454.120828][T12297] total_pgpgout 110140 [ 454.120835][T12297] total_pgfault 130177 [ 454.120842][T12297] total_pgmajfault 217 [ 454.120848][T12297] total_inactive_anon 0 [ 454.137285][ T50] bond2 (unregistering): Released all slaves [ 454.139271][T12297] total_active_anon 0 [ 454.150751][ T50] bond3 (unregistering): Released all slaves [ 454.153726][T12297] total_inactive_file 0 [ 454.167545][T12297] total_active_file 8192 [ 454.171801][T12297] total_unevictable 0 [ 454.177243][T12297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2964,pid=15532,uid=0 [ 454.195522][T15326] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 454.196138][T12297] Memory cgroup out of memory: Killed process 15532 (syz.8.2964) total-vm:90452kB, anon-rss:1228kB, file-rss:21708kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 454.248059][T15326] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 454.363958][T15480] chnl_net:caif_netlink_parms(): no params data found [ 454.485496][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2965'. [ 454.529458][T15553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.575289][T15553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.657657][ T50] hsr_slave_0: left promiscuous mode [ 454.672325][ T50] hsr_slave_1: left promiscuous mode [ 454.682566][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.690128][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.702512][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.710781][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.745847][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.788012][ T50] batman_adv: batadv0: Removing interface: dummy0 [ 454.806802][ T50] veth1_macvtap: left promiscuous mode [ 454.812321][ T50] veth0_macvtap: left promiscuous mode [ 454.818439][ T50] veth1_vlan: left promiscuous mode [ 454.823762][ T50] veth0_vlan: left promiscuous mode [ 454.924241][ T50] team0 (unregistering): Port device team_slave_1 removed [ 454.935582][ T50] team0 (unregistering): Port device team_slave_0 removed [ 455.189295][ T12] smc: removing ib device syz0 [ 455.444345][ T28] kauditd_printk_skb: 805 callbacks suppressed [ 455.444362][ T28] audit: type=1400 audit(1771964328.909:51068): avc: denied { egress } for pid=3390 comm="kworker/1:3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 455.482737][ T28] audit: type=1400 audit(1771964328.909:51069): avc: denied { sendto } for pid=3390 comm="kworker/1:3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 455.512373][ T28] audit: type=1400 audit(1771964328.949:51070): avc: denied { read write } for pid=14240 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.564680][ T28] audit: type=1400 audit(1771964328.949:51071): avc: denied { open } for pid=14240 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.593588][T15153] veth0_vlan: entered promiscuous mode [ 455.602294][T15480] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.609435][ T28] audit: type=1400 audit(1771964328.949:51072): avc: denied { ioctl } for pid=14240 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.644561][T15480] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.648729][ T28] audit: type=1400 audit(1771964328.989:51073): avc: denied { recv } for pid=3302 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 455.652781][T15480] bridge_slave_0: entered allmulticast mode [ 455.685291][T15578] loop9: detected capacity change from 0 to 2048 [ 455.723538][ T28] audit: type=1400 audit(1771964329.009:51074): avc: denied { read write } for pid=12297 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.749285][T15480] bridge_slave_0: entered promiscuous mode [ 455.762997][ T28] audit: type=1400 audit(1771964329.009:51075): avc: denied { open } for pid=12297 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.839944][T15480] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.852079][T15480] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.859643][T15578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.874545][T15480] bridge_slave_1: entered allmulticast mode [ 455.881030][T15480] bridge_slave_1: entered promiscuous mode [ 455.890843][ T28] audit: type=1400 audit(1771964329.009:51076): avc: denied { ioctl } for pid=12297 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.918546][ T28] audit: type=1400 audit(1771964329.009:51077): avc: denied { recv } for pid=3302 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.218 dest=40940 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 455.968361][T15153] veth1_vlan: entered promiscuous mode [ 455.969720][T15578] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 456.012072][T15480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.015150][T15589] loop8: detected capacity change from 0 to 1024 [ 456.039774][T15578] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 456.069355][T15578] EXT4-fs (loop9): This should not happen!! Data will be lost [ 456.069355][T15578] [ 456.080417][T15578] EXT4-fs (loop9): Total free blocks count 0 [ 456.088196][T15578] EXT4-fs (loop9): Free/Dirty block details [ 456.094249][T15578] EXT4-fs (loop9): free_blocks=2415919504 [ 456.095818][T15480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.101713][T15578] EXT4-fs (loop9): dirty_blocks=48 [ 456.121501][T15589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 456.128511][T15578] EXT4-fs (loop9): Block reservation details [ 456.140542][T15578] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 456.149463][T15589] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.192013][T15589] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 3: comm syz.8.2971: lblock 3 mapped to illegal pblock 3 (length 3) [ 456.266924][T15589] EXT4-fs (loop8): Remounting filesystem read-only [ 456.278602][T15602] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2968'. [ 456.295749][T15480] team0: Port device team_slave_0 added [ 456.307505][T15602] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 456.337259][T15480] team0: Port device team_slave_1 added [ 456.433624][T15480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.463857][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.498149][T15480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.569357][T12297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 456.631499][T15326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.674194][T15326] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.735026][T15480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.742004][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.858089][T15480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.947820][ T50] IPVS: stop unused estimator thread 0... [ 456.954747][ T50] IPVS: stop unused estimator thread 0... [ 456.970104][T15153] veth0_macvtap: entered promiscuous mode [ 456.990054][T15153] veth1_macvtap: entered promiscuous mode [ 457.023971][ T2054] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.031125][ T2054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.139807][ T2054] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.147015][ T2054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.309554][T15480] hsr_slave_0: entered promiscuous mode [ 457.317271][T15480] hsr_slave_1: entered promiscuous mode [ 457.323340][T15480] debugfs: 'hsr0' already exists in 'hsr' [ 457.329255][T15480] Cannot create hsr debugfs directory [ 457.348529][T15153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.379620][T15153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.517729][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.534359][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.600566][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.623562][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.679713][T15632] loop8: detected capacity change from 0 to 512 [ 458.219107][T15326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.239569][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'. [ 458.685260][T15480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.741654][T15480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.788841][T15480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.818938][T15480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.867361][T15648] loop2: detected capacity change from 0 to 512 [ 458.904366][T15648] EXT4-fs (loop2): invalid inodes per group: 44576 [ 458.904366][T15648] [ 458.937598][T15648] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2902'. [ 459.765005][ T2054] bond5 (unregistering): (slave bridge2): Releasing active interface [ 459.875884][ T2054] bond1 (unregistering): Released all slaves [ 459.915223][ T2054] bond2 (unregistering): Released all slaves [ 459.924068][ T2054] bond0 (unregistering): Released all slaves [ 460.004558][ T2054] bond3 (unregistering): Released all slaves [ 460.045995][ T2054] bond4 (unregistering): Released all slaves [ 460.090499][ T2054] bond5 (unregistering): Released all slaves [ 460.159958][ T2054] bond6 (unregistering): (slave bond7): Releasing backup interface [ 460.201819][ T2054] bond6 (unregistering): Released all slaves [ 460.227194][ T2054] bond7 (unregistering): Released all slaves [ 460.376098][T15480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.455477][ T28] kauditd_printk_skb: 2105 callbacks suppressed [ 460.455526][ T28] audit: type=1400 audit(1771964333.929:53183): avc: denied { write } for pid=15577 comm="syz.9.2968" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.494589][ T2054] hsr_slave_0: left promiscuous mode [ 460.521522][ T2054] hsr_slave_1: left promiscuous mode [ 460.554642][ T28] audit: type=1400 audit(1771964333.929:53184): avc: denied { write } for pid=15577 comm="syz.9.2968" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.587350][T15578] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.606430][T15733] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.606905][T15578] audit: audit_lost=618 audit_rate_limit=0 audit_backlog_limit=64 [ 460.612983][T15733] audit: audit_lost=619 audit_rate_limit=0 audit_backlog_limit=64 [ 460.629340][T15707] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.634672][ T28] audit: type=1400 audit(1771964333.929:53185): avc: denied { write } for pid=15577 comm="syz.9.2968" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.641019][T15707] audit: audit_lost=620 audit_rate_limit=0 audit_backlog_limit=64 [ 460.669662][T15578] audit: backlog limit exceeded [ 460.782134][T15326] veth0_vlan: entered promiscuous mode [ 460.839746][T15480] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.896480][T15742] loop8: detected capacity change from 0 to 2048 [ 460.921003][T15326] veth1_vlan: entered promiscuous mode [ 460.945785][ T118] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.952886][ T118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.993921][T14240] EXT4-fs: 7 callbacks suppressed [ 460.993937][T14240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.029072][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.036181][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.075876][T15326] veth0_macvtap: entered promiscuous mode [ 461.122723][T15326] veth1_macvtap: entered promiscuous mode [ 461.211075][T15326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.256271][T15326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.292974][ T2054] IPVS: stop unused estimator thread 0... [ 461.325496][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.334253][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.384734][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.393492][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.746261][T15777] lo speed is unknown, defaulting to 1000 [ 462.225506][T15788] netlink: 'syz.8.2982': attribute type 5 has an invalid length. [ 462.244013][T15788] netlink: 'syz.8.2982': attribute type 11 has an invalid length. [ 462.386752][T15480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.663323][T15803] loop9: detected capacity change from 0 to 512 [ 462.704759][T15803] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 462.751419][T15803] EXT4-fs (loop9): 1 truncate cleaned up [ 462.757681][T15803] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.005813][T15480] veth0_vlan: entered promiscuous mode [ 463.022267][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2987'. [ 463.099800][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2987'. [ 463.110968][T15480] veth1_vlan: entered promiscuous mode [ 463.212831][T15815] team0: Port device team_slave_0 removed [ 463.228987][T15803] ================================================================== [ 463.237224][T15803] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 463.244459][T15803] [ 463.246812][T15803] write to 0xffff88811b12d86c of 4 bytes by task 15818 on cpu 0: [ 463.254536][T15803] __xa_set_mark+0x172/0x1a0 SYZFAIL: failed to recv rpc [ 463.259130][T15803] __folio_mark_dirty+0x383/0x4a0 [ 463.264159][T15803] mark_buffer_dirty+0x120/0x220 [ 463.269104][T15803] block_write_end+0x12d/0x210 [ 463.273900][T15803] ext4_write_end+0x133/0x750 [ 463.278606][T15803] generic_perform_write+0x311/0x490 [ 463.283908][T15803] ext4_buffered_write_iter+0x1ee/0x3c0 [ 463.289481][T15803] ext4_file_write_iter+0x380/0xfa0 [ 463.294704][T15803] iter_file_splice_write+0x6c4/0xa80 [ 463.300087][T15803] direct_splice_actor+0x156/0x2a0 [ 463.305205][T15803] splice_direct_to_actor+0x311/0x670 [ 463.310584][T15803] do_splice_direct+0x119/0x1a0 [ 463.315454][T15803] do_sendfile+0x382/0x650 [ 463.319892][T15803] __x64_sys_sendfile64+0x105/0x150 [ 463.325097][T15803] x64_sys_call+0x2dc4/0x3020 [ 463.329790][T15803] do_syscall_64+0x12c/0x370 [ 463.334408][T15803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.340333][T15803] [ 463.342678][T15803] read to 0xffff88811b12d86c of 4 bytes by task 15803 on cpu 1: [ 463.350320][T15803] xas_find_marked+0x5d7/0x620 [ 463.355119][T15803] filemap_get_folios_tag+0xfa/0x510 [ 463.360407][T15803] filemap_fdatawait_range+0x88/0x1e0 [ 463.365800][T15803] __writeback_single_inode+0xdb/0x860 [ 463.371286][T15803] writeback_single_inode+0x16d/0x3f0 [ 463.376692][T15803] sync_inode_metadata+0x6e/0xa0 [ 463.381659][T15803] generic_buffers_fsync_noflush+0xee/0x130 [ 463.387566][T15803] ext4_sync_file+0x1aa/0x6b0 [ 463.392257][T15803] vfs_fsync_range+0xc5/0xe0 [ 463.396861][T15803] ext4_buffered_write_iter+0x34f/0x3c0 [ 463.402452][T15803] ext4_file_write_iter+0x380/0xfa0 [ 463.407685][T15803] iter_file_splice_write+0x6c4/0xa80 [ 463.413077][T15803] direct_splice_actor+0x156/0x2a0 [ 463.418208][T15803] splice_direct_to_actor+0x311/0x670 [ 463.423593][T15803] do_splice_direct+0x119/0x1a0 [ 463.428454][T15803] do_sendfile+0x382/0x650 [ 463.432893][T15803] __x64_sys_sendfile64+0x105/0x150 [ 463.438107][T15803] x64_sys_call+0x2dc4/0x3020 [ 463.442803][T15803] do_syscall_64+0x12c/0x370 [ 463.447420][T15803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.453338][T15803] [ 463.455671][T15803] value changed: 0x00000021 -> 0x0a000021 [ 463.461398][T15803] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 463.463728][T15803] Reported by Kernel Concurrency Sanitizer on: [ 463.469887][T15803] CPU: 1 UID: 0 PID: 15803 Comm: syz.9.2985 Tainted: G W syzkaller #0 PREEMPT(full) [ 463.480842][T15803] Tainted: [W]=WARN [ 463.484682][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.494765][T15803] ================================================================== [ 463.546167][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2987'. [ 463.689310][T15800] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.809167][ T118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.868669][ T118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.947729][ T118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.997763][ T118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.077885][ T118] bridge_slave_1: left allmulticast mode [ 464.083570][ T118] bridge_slave_1: left promiscuous mode [ 464.101281][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.114493][ T118] bridge_slave_0: left allmulticast mode [ 464.120226][ T118] bridge_slave_0: left promiscuous mode [ 464.134483][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.246768][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.256841][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.267099][ T118] bond0 (unregistering): Released all slaves [ 464.310285][ T118] hsr_slave_0: left promiscuous mode [ 464.317321][ T118] hsr_slave_1: left promiscuous mode [ 464.323052][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.330578][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.338160][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.345619][ T118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.357562][ T118] veth1_macvtap: left promiscuous mode [ 464.363097][ T118] veth0_macvtap: left promiscuous mode [ 464.369146][ T118] veth1_vlan: left promiscuous mode [ 464.374509][ T118] veth0_vlan: left promiscuous mode [ 464.465668][ T118] team0 (unregistering): Port device team_slave_1 removed [ 464.475458][ T118] team0 (unregistering): Port device team_slave_0 removed [ 465.058829][ T118] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.108101][ T118] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.158760][ T118] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.207815][ T118] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.299315][ T118] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.367136][ T118] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.417662][ T118] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.467759][ T118] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.480263][ T28] kauditd_printk_skb: 1694 callbacks suppressed [ 465.480281][ T28] audit: type=1400 audit(1771964338.959:54788): avc: denied { search } for pid=15912 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.508576][ T28] audit: type=1400 audit(1771964338.959:54789): avc: denied { search } for pid=15912 comm="rm" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.530948][ T28] audit: type=1400 audit(1771964338.959:54790): avc: denied { search } for pid=15912 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.553784][ T28] audit: type=1400 audit(1771964338.989:54791): avc: denied { search } for pid=3042 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.587523][ T28] audit: type=1400 audit(1771964338.989:54792): avc: denied { search } for pid=3042 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.611909][ T28] audit: type=1400 audit(1771964338.989:54793): avc: denied { search } for pid=3042 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.635687][ T28] audit: type=1400 audit(1771964338.989:54794): avc: denied { read } for pid=3042 comm="dhcpcd" name="n59" dev="tmpfs" ino=20150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 465.658142][ T28] audit: type=1400 audit(1771964338.989:54795): avc: denied { open } for pid=3042 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=20150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 465.700797][ T28] audit: type=1400 audit(1771964338.989:54796): avc: denied { getattr } for pid=3042 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=20150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 465.728533][ T28] audit: type=1400 audit(1771964339.029:54797): avc: denied { search } for pid=15913 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.765433][ T118] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.827782][ T118] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.847253][ T118] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.897522][ T118] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.017255][ T118] bridge_slave_1: left allmulticast mode [ 466.022987][ T118] bridge_slave_1: left promiscuous mode [ 466.051942][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.076319][ T118] bridge_slave_0: left allmulticast mode [ 466.082282][ T118] bridge_slave_0: left promiscuous mode [ 466.094482][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.103701][ T118] bridge_slave_1: left allmulticast mode [ 466.109507][ T118] bridge_slave_1: left promiscuous mode [ 466.115259][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.122841][ T118] bridge_slave_0: left allmulticast mode [ 466.128645][ T118] bridge_slave_0: left promiscuous mode [ 466.134306][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.143239][ T118] bridge_slave_1: left allmulticast mode [ 466.149017][ T118] bridge_slave_1: left promiscuous mode [ 466.154773][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.162663][ T118] bridge_slave_0: left allmulticast mode [ 466.168494][ T118] bridge_slave_0: left promiscuous mode [ 466.174221][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.182784][ T118] bridge_slave_1: left allmulticast mode [ 466.188804][ T118] bridge_slave_1: left promiscuous mode [ 466.194547][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.202282][ T118] bridge_slave_0: left allmulticast mode [ 466.208112][ T118] bridge_slave_0: left promiscuous mode [ 466.213875][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.368505][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.378356][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.387848][ T118] bond0 (unregistering): Released all slaves [ 466.486666][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.496538][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.506559][ T118] bond0 (unregistering): Released all slaves [ 466.568307][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.578333][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.587807][ T118] bond0 (unregistering): Released all slaves [ 466.647577][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.657790][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.668692][ T118] bond0 (unregistering): Released all slaves [ 466.756469][ T118] hsr_slave_0: left promiscuous mode [ 466.762268][ T118] hsr_slave_1: left promiscuous mode [ 466.769669][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.777853][ T118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.788903][ T118] hsr_slave_0: left promiscuous mode [ 466.795389][ T118] hsr_slave_1: left promiscuous mode [ 466.801024][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.809339][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.820627][ T118] hsr_slave_0: left promiscuous mode [ 466.827409][ T118] hsr_slave_1: left promiscuous mode [ 466.833147][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.841289][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.849940][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.858463][ T118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.869025][ T118] hsr_slave_0: left promiscuous mode [ 466.875591][ T118] hsr_slave_1: left promiscuous mode [ 466.881628][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.890166][ T118] batadv0: mtu less than device minimum [ 466.897230][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.908306][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.919013][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.930080][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.940887][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.951735][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.962513][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.973683][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.984767][ T118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.000590][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.008317][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.025109][ T118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.032644][ T118] batman_adv: batadv0: Interface deactivated: dummy0 [ 467.039354][ T118] batman_adv: batadv0: Removing interface: dummy0 [ 467.053763][ T118] veth1_vlan: left promiscuous mode [ 467.059121][ T118] veth0_vlan: left promiscuous mode [ 467.065084][ T118] veth1_macvtap: left promiscuous mode [ 467.070567][ T118] veth0_macvtap: left promiscuous mode [ 467.076151][ T118] veth1_vlan: left promiscuous mode [ 467.081395][ T118] veth0_vlan: left promiscuous mode [ 467.087323][ T118] veth1_macvtap: left promiscuous mode [ 467.092857][ T118] veth0_macvtap: left promiscuous mode [ 467.098963][ T118] veth1_vlan: left promiscuous mode [ 467.104210][ T118] veth0_vlan: left promiscuous mode [ 467.110706][ T118] veth1_macvtap: left promiscuous mode [ 467.116328][ T118] veth0_macvtap: left promiscuous mode [ 467.121875][ T118] veth1_vlan: left promiscuous mode [ 467.127145][ T118] veth0_vlan: left promiscuous mode [ 467.280669][ T118] team0 (unregistering): Port device team_slave_1 removed [ 467.290388][ T118] team0 (unregistering): Port device team_slave_0 removed [ 467.349812][ T118] team0 (unregistering): Port device team_slave_1 removed [ 467.408967][ T118] team0 (unregistering): Port device team_slave_1 removed [ 467.418885][ T118] team0 (unregistering): Port device team_slave_0 removed [ 467.477029][ T118] team0 (unregistering): Port device team_slave_1 removed [ 467.487674][ T118] team0 (unregistering): Port device team_slave_0 removed