last executing test programs: 11m24.132482325s ago: executing program 32 (id=834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) 11m3.729925249s ago: executing program 2 (id=973): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x1844}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="5800000000000000290000003600000089070000000000000738000000000cf800020900000000000000600a0000000000000300000000000000040000000000000085fae976000000000700000000000000040100000000200000000000000029000000040000003b000000000000000401060000000000e0000000000000002900000036"], 0x158}, 0x4004000) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0)="9cb64d63a48f1faeecde34145245a243ccece143ba62ecd87f58a84965dbab5aff4c84c17c763b5af3c108a4bbde39a582ff9f706dc24a110209e624d54ec87afa8dffc27c47f1fba744bc33cc1758644895482ca7aa6f30d600f8f26cd180865ddb253ced6b1a31b108a6188813dc896497325a522f46", 0x77, r0}, 0x68) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendto$packet(r7, &(0x7f0000000200)="c3e0f9de0f5d49c2d36002e689e1d4fb33c64323faa8a432b870b25ae59b03", 0x1f, 0x4000080, &(0x7f0000000340)={0x11, 0x1c, r5, 0x1, 0xe, 0x6, @local}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000004001c001280090001000f0000001a0000800c000280060001000100000008000500ace44741f996a99b0befb3de919453789aad746934d60ec3f0ebf15615caf233085258e0623ed52a035aea8f252210ea", @ANYRES32=r8, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x50}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 11m3.452085222s ago: executing program 2 (id=982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0xffffff80}, {0x1, 0x9, 0x80, 0x1000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d4, 0xff}, 0x0, @in=@loopback, 0x3505}]}]}, 0xfc}}, 0x0) 11m3.416523776s ago: executing program 2 (id=983): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x14, 0x810, 0x7, {[@noop]}}}], 0x38}, 0x0) 11m3.313169638s ago: executing program 2 (id=985): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2004006, &(0x7f0000001180)=ANY=[@ANYBLOB='rodir,utf8=0,nonumtail=0,uni_xlate=1,utf8=1,shortname=mixed,utf8=0,shortname=mixed,shortname=winnt,iocharset=mn,shortname=winnt,uni_xlate=1,iocharset=default,shortname=lower,shortname=mixed,\x00\x00\x00\x00\x00\x00\x00'], 0x25, 0x36e, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0xc}, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="97119370dd7b735295e730000000000000000a100002fc02ff000000000014000500ebf088080bea1b703d3127ff0100"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioperm(0x7, 0x4, 0x7) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000000)={0x0, 0x300}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'macvlan0\x00', {0xcd6f}, 0x3}) 11m3.130138487s ago: executing program 2 (id=988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 11m2.887688635s ago: executing program 2 (id=993): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB='dots,nfs,dots,nodots,uid=', @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x17b, &(0x7f0000000880)="$eJzs3LGKE1EUBuAzblaz2mwtFgM2VkF9AkVWEAcUJYVWCqsIu7LgWow25lF8C59KkFTprujERGNGx+Aw2eT7mhz47yXnQDLDDWSeXXl9dHhy+vLk4Tj6WRa9W5HHJIv9OBc7URkFALBJJinFl5RSujCKvY+RUvptyYdOGgMAWtPg/g8AbJj6+/+nV912BgC0xfkfALbP4ydP798uioNHed6P+Dwqh+Wweq3yu/eKg+v5d/vzXeOyHO7M8htVnv+a78bFaX5zaX4+rl2t8m/ZnQfFQn4pDtsfHwAAALbCIJ9Zer4fDOryqvrp94GF83svLvf+8uZ7/3UUAKCh03fvj54fH794809FxCq71rp423DxbkSsS89nusimn8AVtv94MMUaTLG5RaPLR9bahQlo3fxL33UnAAAAAAAAAAAAAABAncb/B+r/efEk1W/vekYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY9DUAAP//LPhJqA==") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) exit(0x1ff) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x9, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11m2.858154861s ago: executing program 33 (id=993): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB='dots,nfs,dots,nodots,uid=', @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x17b, &(0x7f0000000880)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) exit(0x1ff) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x9, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8m33.661023287s ago: executing program 3 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000141000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 8m33.657307467s ago: executing program 3 (id=2407): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xd3, 0xa4, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x28}, 0x1, 0x6558, 0x0, 0x400c000}, 0x4880) 8m33.575917702s ago: executing program 3 (id=2409): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x320e, 0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xfd, 0x1, 0x3, 0x9, 0x0, 0x2, 0xa5110, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffff001, 0x1, @perf_config_ext={0xfffffffffffffff5, 0xffffffffffffffff}, 0x6e8, 0x3, 0x8, 0x2, 0x0, 0x89, 0x2, 0x0, 0x0, 0x0, 0x2800000000000}, 0xffffffffffffffff, 0x2, r0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000001200)='./file0\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000001200)) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717d, 0x100, 0x14, 0x284}, &(0x7f0000000140)=0x0, &(0x7f00000011c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$inet6(0xa, 0x3, 0x2) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = dup3(r3, r2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0}, 0x7ffffffb}], 0x1, 0x810) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) 8m32.601617206s ago: executing program 3 (id=2412): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff010102000100080006000000000008000e000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x20, 0x10, 0x200, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x75b13, 0x44}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x404c004) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r5, &(0x7f0000007a00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0004020e"], 0x28}}], 0x1, 0x400d0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f32, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) 8m32.21605345s ago: executing program 3 (id=2421): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f0000000100)=0x4) set_mempolicy(0x6005, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@noquota}, {@usrjquota}, {@nodioread_nolock}, {@nolazytime}], [{@smackfshat={'smackfshat', 0x3d, 'nodioread_nolock'}}]}, 0xfe, 0x275, &(0x7f0000000980)="$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") creat(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000020000100000020000000000102000000020004020000000008000400fbffffff08000db691000000"], 0x2c}}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x15, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0815010021100000140012800b00010069703667720000000000008008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r6) r9 = memfd_create(&(0x7f0000001b40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd0FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3!\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xee\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoUu76\f\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x85\xcae\xe4\x02]\xe2\xa8*\xae\xfa)n\xeb\xf5\xd2\xfe\x19\xf36d_\x9e\xa7\xe4\x8b\xb56\xe8N\xadR?\x8b\r\xe0:aI\xbb\xdf\"\"\xaa\xd3\x19!\x06\xa0\xcc\x90\x1e\xf5O\x82t^:\xd6\xc6\xa5Hok\x86o\x9b[\x13\xd8\x01\xfc-Zo\xbay\xb2\xff1\nMn\x8f]\xe1k\xe9\xd0\x05\xfa\xf6R)\xd6\xdc\xd7\xfd\xea\x1c\x7fhD\xefx\xf9[`\xdd\x10\xb7\nz\b\xf42\x13Z\x05F\xdevc\xca\xad\x19\x1cn\x9dE\xd0\xe5\\2\xbff\xac\xae\x8bVi\x90\xa9\xef)\x16:M+\xf6\xcde8\x10=\xf9\xf2B\xd0\xbc\xcc{=\xfe}\xb4\xf6\xa5\x0eb\xf7\xc4\xacH\xa5\"\xf2\xcf\x8d\x85\xd2NiE\xaa\xb0\x87\xeb\xfa\x93!\x837\x98\x8fh\xedt\x89\xf8H\xa1d]\xe5\x8b\x92\xec\x1d\xf6\x8e1]f\xbaa\xaf\xef\x85\xecS:\x99\xf3\x8c\xea,\xd3^XQ\x98\x97\x1a<\xbd.\x89\x84\xea\xf9\xa8\xd1\x1a\x8f\x7f\xcfm', 0x5) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYBLOB="001828bd7000fcdbdf2502000000050002000a000000cbe1b05df591bdcbb165eadc24f48900a8065c62a95fe4fd5faa7f2c07a4854f0e32b8bc1dd6653a3ae054a32e9bd949b80dc852772a8975d6556a0df5a0f091d1"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000220000032abd7000fcdbdfa50a00000006000002080000e80876fd387b5773ea1666460a03a4ffbb7239df1625b7888427e77c378e8c4f3c2b90708039df40bc141b4193e9a3e7f93011bb48bacbe5ecc1342ebd4f1bf3b0eabfdc01c693a6fa8863dd95d859a19f0681ef2708d66035a173530be51b07e727e1644e8af98b5d2f951380cddb75cabc67b48ee7b6297b8d1c1c446925249c797933153e444d4e0b37aca1ef2244b045da9a2196110b992ce6837b773ef90555bc14d5060d0b19b1"], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 8m31.557330168s ago: executing program 3 (id=2426): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 8m31.557102628s ago: executing program 34 (id=2426): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 4m21.42726909s ago: executing program 1 (id=3707): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0001003c0001020a00018014000300ff010056300000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003b0007d6f0c155e7752c7bb601bca67563ecc6e5f485016f2cfd0734bde14b40435868c60f18b71e39837e36d57b72fd67eb41dd1867557b271ccc0d3d27af4cbc9e468daae0e84f6aa3417fcf963d3eb15aaf2719fd05ae"], 0x34}}, 0xc000) 4m19.060608618s ago: executing program 1 (id=3720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e26, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r0], 0x30}, 0xe000000000000000) 4m18.979387584s ago: executing program 1 (id=3721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x10, 0x700, 0xeef, 0x6afd5006, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x28, 0xbb, 0x0, 0x6, [0x7, 0x7, 0x7, 0x5617, 0x8001, 0x4, 0x7, 0x3, 0x4]}, @lsrr={0x83, 0x7, 0x44, [@multicast1]}]}}}}}) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'}) (async) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)="4e8a6230e8ac95802666edcaa2b1112b0dab126e99c843ea4540ec18bb4fd21bc44acb45c92bde27a50a4b7976806debb8f84cf0ebdc81cd8146b8c7e78077b82850cc87acbf18f69c9e6b84e9d9af047980df6a014e0403bcf15b11c6c6a751068eaba8b1748f7520e7cf070010fab17c7c478013c933ca155f31eff65da8eba11ae4978549bc49635547d52c52e033f64f1c772c0614172a002493c4b73f2809c17a90fdea42d2a45e9d0bc25a7a1c99bd65ebf9e13ff83d3744035d7e872991fa0e", 0xc3, 0x3) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000001800)={&(0x7f0000000440), 0xc, &(0x7f00000017c0)={&(0x7f00000004c0)={0x12d8, r7, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x11c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "383e78277e1e3d13114f258af00369ad7c229ec523cad11857c93718088492faf4860865dc28d0858826145814e3030e1fb195930b028694e17e5a303cb84b4aff9fa0eb8330b292cd8439cac657e41ded32b4af6c42837d27ded56edd9ebea1641e457fca654501a19b0520c3f029470269ec6f3133687ecdce3e34d666e2f7cf24fb494890e45f6e63b0a5cca37599ec4d780f989be7bb76e7566f7c7e375ef0379a2f8283f36fa1ad712987683df792ad87640ba2422c8ccb329135287cd7fd8297327e43f7171f0bcde2887b036461174d92e86357adb414ad1b1dbbac67bd38841fd1142eaa1ca246711a1ac84c89658be092f5d0a0f37339ac7f8bc784345b5f2d4ef5ca4cb6b21912850969aa7e83300bb01a1490b8ee21eb1de9269e367cf632c1ba45f675ce2cae1c20aa4d91d304698172efb06b47ecdb68bd90ee9d698e8275b4163a4128d71e7fc71b7c33ab342112e91d7d357e9664d7716a52b6b6769ef5ad2e9c3976b0f132276a036b8ffc6c25d4b0be782109f0d9bc3d1a32dfebbaf077ec2f664e45f75c27336aa48e3cf2e6e6fc69494812b41e4d83df9a3b527bcc8af7f9823d8fa8760b2ae01064c60f506953fb70b1a723a503afbd0b5be1527a6ad43222e9741e334f0d135c473ee096d48acd4471ec00d9d7977a90682c64bce987ea726b54d525de353d65a87a56c32fb23a6d761d630ad880b4466aa4831dca39d3fd72fb623d7a9a2e802e3edf01932af89b77d6452f1c33afd3576c8bf34aaa0babc6ff19922719abc6e5d8893bd25a07a6835a89acda08cf239f65d4a44eea7223887678cb6da34fcb061703f2c9c61844d2ad32c2158153bbabd3b23f50fd2ecd5b098668411fe775557b9969c6c68665708fb976c5215e8a73f5d994f65939e58d791dd4dcca5ccbc872f7bc760bcdaec17e81afa8713209457ac0229979caed8212d90c036a70124feabfbe4f071ed758ac6c4634ad8efe55e39175956bf49675d26b14cf4ab227f7ca1286e2e9a100601d4b851646dc37579087717a33f830f417b8a44f7083c80977c400a4a4fed2c9dbd1535c3d2675ffd8fcdab79f53e7dfa0a4cb48d01261cecfaf2560f6c59f3004308bb95197b11861bd22f8aa4904685a5fc0328095c621ea54ee4bf75e2058e11dd43f8fd7e34a05aa9e6a7d76a9ecf574a375279134ae7ff8ca74eedee65c35f60492f1d8ab2b3365f9bd167cca5de4333b2cc0ffd7ebb783cd54e1b51dee47266f8ee056646b883c54aebc3b55921fabda2112b3328edd774c84a6c581d168e2db65ca68c65a4ae8acd3b14df685dffe48cb24a5dd3e668caa3f16af4984e7ea4a7656202788eddf6dedec41958849df93b138191efbc209652654e4169f66ab2851e97d9113b1bb8a73124ff045587a72b880eb6a744a776e6ee47d4142a83606272f0bbf1b85434ef79d273b617151dc7e3c4d8b3c0f29662db30f058f0246a77a05db6e43204a1afa9219ae134f377f98ccaedef0f9f791acc5eebbf069333658ad11fdf386a63e76356aca742e06fb0a7cf47f5da1c9da50a4eaedc750ff4d23296dfcd9329dc20448eb50e1bf72719fc17206e90b34f823b6b1f4a1a3134f6fdc93574376aacd78608c7c1d07d94d893aa63c3df5c40fafb663beaf1bcb86e2f03653986381c536f6ca4df84a334f7eb4966fdd5e3db172ecf61fa4b7a213c91edf50b1f1a6dca86ee30a520a4f2b6a5dcb76a22156a6337351b12441c0a4b50fc38d13d457ffbf5f39718fbd3a87f2aeb546040a6e319540c0106fc70723e3ea8a30e5356c10e738d2ff531bb5397098415aaada43935616747fe7cdb8868a0c3ba36fcd85bed2224985d7fa1615f22d2dd33856a72c039b9379cc5ed44dc67404066f776a72c5a5f5e3d3a90d82a7dc761a74b7874ae3740734a54581633930f1f4575a7b8179a48bc98d6b1b471e358b3ccc8958fdb9c9e71c54114a2cc236728a67a72d2da36dba1a4e006446d004a3b5419865f6c5d680e45e3adc18dd601df141e7942e8c266050b424be41ad7325e5d3902ef5b414dd2782ee4fc541565fc1a24357fac7efb65404d7f3ced3c9f6cb0834befabd5e8cd251787ade0cc0c137fedf7605626ec9e3d1d01be1b76942516a8a20dba684e00bd972989f515b751090edb641e3e33746f06d0fd24788c8c89771dfac26978156e73e662c8f91bfc9488947307f97abfcc8c76169bfa32a36657833ab13b638e9eb822268ff6fbf4084f4e01a3e538cd8d147d08cceb1df7850e6e5d85642e6388c09af35b1b29b91a0b8067fe70aaf69a6f722ffa087bb2e0480c1a93489a91accd312964df9a3ce5d16a35290d278fa6b8b91e3f9701562835f38daf29229ab838137bdf3e101963ce8d6db2b30a0f5126536e695d1df7b920bc1e5d2771327a0b372e26b1b70fe177053323d9f64bee6f560ee86b35c49cdd73c7ab179e358f8182762ab67203942b301365a4adaa9d92bc60318b3fcff2dc2ef25bbc62d78ff9c56fdd2edbcdab5eb5057d270d2d8560cc11654e7ca526ece9e292ed903dcfd9281d9f127d979b93d4e881b0aa1d3603769d08a5b0762eb9f2f7aa4d149d03e896b177982313e0bbc77f20a4d27c8a6260a1517b5b5c34bf325765bff64fba0d96ab47758e2c4adbdf6cd1128423a54414320cdf30d456ce34c5c955c8997375f7dad0cdb2a2bfb893f93cb7e0f8115e3e905c37bcddc240442a7ee234c45593fd95758fd7685daeed1fe80e875fc559104df9969fc764dc332b94f3364463b94c86f1787c637d60e8c3b895d41a192bbfb9018f6573c876f6e0dfc25bcb9d031212225f93ec4f0fa04dfe86b9331595c5ef7664e1d62d1a7a9c70dda2f38e3b544a36335a43ee6c1f07b4b1c16e19dbdde0471f7d2906be3e1046baf9754c7a5d1026cb4a96d96c5c86618e42d07b4f16154a2e7f3e1ad78370ce6a7dcf34bda1576914c92064161a492e96db41aa05a6a2281bcd49bc92c971d77eb59003a3fc65c708dc546b00234085993455468afacb23d3f2079368d691d64927e2978ba6dd3b28dbc55cfb314ccf44159525e98c93d5137128fa32e3553490468fb04384ce97582bc51d0051e81fb7afc1e8d2acca7093775c76bbfc727416720020605c6b59135fb9c2f54421ac3fe9c0b3d5e9469f6d3b5cab897b7c0c533780d74a5524989bbc5b5522bc2fedf7420274561151a933a5bc22329d5f771111716b3901952d968e4594aa782d4f7aed0419e199cda7543b13749a8a6c2f35f43b6950fa04920e1f5e900bf151fa4d06d7e4a279458b6c9fe7644d2407adffc3c2520db530cbcc3213594afaf9156c151b61f11de2d298d4bbfc83087605816e6b3b7f7583d0f3d9789871a83698d49c4af0dfb551a443bdf34144f2b62e25c6f43e7ea899eda17b9dab6851585280666de60e28bf82ebaefa8f4ff2eb89d3d1197dbc9b043bf82751d4b1a2140a071cc0f210e4d639f2b460744f67b7a805f759cf8f7de4300ebfc2384628dd85083a175434a2594a99f7b67807cb0d8774d96d46bbb0ba14520feb154f82b833fd5b48df15eaa16c45698eab995d3b0222cba79661eb86d180abf36b1f52855e0e70e6ca8b76fb3bcd6df321d7d61d2085cf50bd66689b3613b7b8746d5e42f203500d671909fb840781e7d596fcc114460893daf6b4ab951f58eef7149b228e5732d95827ed3ba5ad926f2dc3e76bc6c85fa356c64b54263cecb3181b8acd37c6ff8837195fbc934e2ce026c681eee18259e8b55dffec2cfeea876f9ddb644470f642434483f2c86cdf96652ee92fb2d05fab1b976581d44c0c0310a999217265258b2f246ec31ff941e3f49e338992bf971064ee86abef06471f70a79fed50dc6b3de4ca5aa1c83206532b0ee80f16bcead1a30b11dd82265f54a1b9448a419d09ff46c34f85cd857b0a1e0894b7487a7d0b8c63d471f9980a869f0d816ce2a1e4a47a333c6c1a58dd22bf5781d69bc01e914716f6d01e8b8720f865f9825d1a56832696bd080871705331ffe96a9629842757bc4da2974062d70a91b6eac866587ce9fc486def4adb7b21947412439fd8ae1269cd1ad223f33709a5f126e6b3dc7984f083e2a85140615da277ba032c0258d9211df1cab2acccec28287c3be86a3e8b3e937b58bcd64ed483a579540843584008855fbf0a7028e160180e8bc7ebb1ac398a382aa8f80896191f9eb2e0c060fa94a83fb6f971da559cd4dc6e2efa97f02a303aff9d099864736dce0327d099ac9d54384333cfa1cb8c573a8f8d1ad0efdbca94b93120ee94a4a4de6e22b687bbe1d78b8de4e75fbbc01c9ece653b6f1c713a1e64adf88ed5f6b53972da0ba433f8277c6ada1b1568e82516ded5e762d5e970416a1631ff38b363710726779d3ee740d15a185c8592c4a81d67f172633d326da9f800cf1e7067ccb90d841deeeed57319fe9b4e368a7419d220b47693299964f8d83027150eefb321bca60489effd8bca066019c4ceabe579bd53397971e31ca2094caa7253e8e93cc2348c45254fda389aa19bcd637fa623d096e1ab803d342b0d5169adfcc8dbeed6eb6b4277e79da075076c001420e64765a268f77a5a514b8dd3d9a8a0d78bb65eb817bfe5e0165d29da1479264fd7a24f096a13ee30801ca512ca34d0a4ac1a1adf383678456d9ee0c54431883dc6174393add5bc1aa4e774cfc8ebfdff49bf5e6575a04d932d2914bbcd792675e41605ee17f07e8ea9ffae713d461440e74bc3b9b79a6df7b6f267c96ae3b87d4db51e0115ce607e6d1e56d5127a9e378bf097d4fcfec711b46731f2876e1bf1d4bf6af23898221b419d62dbbe0d9e1c4ab5923f55cdba107983845f611f8b0862103c13293b20acf5943b76c35bb4a8168ba3418a8135bf85a3e26c13b5141ac3a1a31ab166317dbdc973662cbd51d781f9c3a93504154d48165ef0887343fdffb2a2a364e0330bca4601b568b9a29bdae973780b4218985c1c0e2aa0c5c0c953b7aec8e6a2ee795b6f19f028e8fccbb92bba8261ba1c63903f27154bab94f8b337e20690d46ff28d8837d8ddda5aa7dc890803f4a87a545a6bd0e6aa2e78c2cbb7de58fd75ca8dce1cb62e4421ec8443f73dd677c48dc2b6ed236e22f8c27b8b66d8de8a9766289c703398a7ff885d5bbbe7c498d1b03809fb033e34ce3abac64a55c3341960012029053a816d54c12b479976a66c805987ac778de116e5c323198b89923bb72a61e399c65e99d2fe796936b3a05812717e5fac980c56106cc57e7d15a4c7c393598da4b17a841ce0d3c135b109904bb497ac54b1acb7317ba9a2ae3a4c5e9d7a46204676159753071fac68a73d54edced5c0a61b8a27659815884cacf17d25354a5568a8acf4aeba0625fc2b1e1bf2c8a1f610b5cd8c58a2ff99c29c3de1e7508e9d9080c3387470e78a235d4908bc0d92f29fa3e8e1fb40ff422b710b7f02db9fd84fba9f5b0604892a6ff608d355d0eaf7e6da977a61b436830097ea65f50def6c0ffda2f3ad6e8596460114f2ecd3b77d3577ca303d5e749f4f859a44ec552f7ecadc1a32bd846a14afdb7381bc8d2a44d4d2a3b7d348e73135a17714eb2a49362da4c3f567cd1ef6d3332400336e2cd9acf4aa071720a3877a5c7210d68f8fd534bf029a9d9c5d5d536a147bd977fa8b703c1f8685e1904eb36e493bbb8d520a7802bf4ad38c214be20407f67f070dca8fb795909fc5174bbf81e25e01d353014769674edf8c13c8c9c73e273cbad92cc17c5db"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "f99b082256c4d732f63ea9cb342f7a0432f3f66ed9e18f4172664238a2d884d8c1486439"}}, @TIPC_NLA_NODE_ID={0xe0, 0x3, "63a62ba26b324175ee7adf2e070502469bc37e356a8f75cb14ff4f80fb394462aefe1156241f6c9854d06814ba937fc50a6679cd6e574f57a5bff56034224d809d77ca3343e04a946c1006564fa92f5793c486dad413e0f8aa9e06328f4803c17301507ad75f4d7a2177ca440ad9660e333e7d56dda9a38cfee506254f4326472dc8b5c132e2248e07a9303698d3d4553e6a3209773847cf9910fb601997457b13939b559cad9854339c9886929950df6a5acd5743fbf20e0ea9790de41788f193e5dff6fe9f4df70330f9943cf77ab94fa80de7e8ef1ba86388dee3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "70904a49b1d9d4afd8f563dcd655fad63a3b0571e36008c315"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0469fe51f0a2a8fb86301729bbffea760aab59c1c4"}}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa17}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x53, 0x3, "68979f8ea60c76de04d13c83c952190d9122c10e6681a87685f356f2d9c4ac1bf78968e94192001a73e75d269b97cbd4ee26eeb3c6eb603de89577e5c5e81621ced78eff984632d5dba978c3ae5689"}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5a, 0x3, "7be9bee5d1408f25deaf2ea5869b511b8b9fdc2965c3231e6ffb386096a663bd4e99643d820bc697f4ef585c544cb3fdf64f944402c3581c01e13b8eefeadfb9e5317810f4f276c183e5dc2d093327e75cc945104816"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x12d8}, 0x1, 0x0, 0x0, 0x20000084}, 0x8008004) (async, rerun: 64) r8 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001840)='./binderfs/binder-control\x00', 0x2, 0x0) (rerun: 64) sendfile(0xffffffffffffffff, r8, &(0x7f0000001880)=0x7fffffff, 0xfffffffffffffff8) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000018c0), 0x4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001d00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001940)=@newqdisc={0x35c, 0x24, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0x1, 0x6}, {0xfff1, 0xe}}, [@TCA_STAB={0x190, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x10, 0x4, 0x7ed733d5, 0x1, 0x7, 0x2, 0x5}}, {0xe, 0x2, [0x4, 0xd, 0x8, 0x4, 0x8]}}, {{0x1c, 0x1, {0x26, 0xd, 0xffff, 0x6, 0x2, 0x800, 0xfffffffe, 0x4}}, {0xc, 0x2, [0xdc, 0x5, 0x4, 0x5]}}, {{0x1c, 0x1, {0x2, 0x40, 0x7, 0x4, 0x0, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0xd, 0x4]}}, {{0x1c, 0x1, {0x0, 0x4, 0x6, 0x8, 0x0, 0xe50, 0x1, 0x2}}, {0x8, 0x2, [0xff, 0x1ff]}}, {{0x1c, 0x1, {0x8, 0x3, 0x3b, 0x2, 0x1, 0x3a1, 0x1, 0x8}}, {0x14, 0x2, [0x6, 0x6c, 0x2, 0x0, 0x9, 0x9, 0xc0, 0x9]}}, {{0x1c, 0x1, {0xea, 0x7, 0x40, 0x5, 0x2, 0x6109}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x1, 0x2, 0x0, 0x1, 0x6, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1, 0xc, 0x7, 0x2, 0x1, 0x4, 0x4}}, {0xc, 0x2, [0x6, 0xffff, 0x5, 0x5]}}, {{0x1c, 0x1, {0x4, 0x9, 0x3, 0xaa0, 0x0, 0xc702, 0x40, 0x6}}, {0x10, 0x2, [0x1000, 0x8, 0x7, 0x5, 0x596b, 0x7]}}, {{0x1c, 0x1, {0x9c, 0x5, 0x7904, 0x2, 0x2, 0x80, 0x7, 0x3}}, {0xa, 0x2, [0x1ff, 0x5, 0x5]}}]}, @TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xa2, 0x9, 0xe6d6, 0x1, 0x6, 0x0, 0x5}}, {0xe, 0x2, [0x2, 0x9, 0x1, 0x7, 0x7f]}}, {{0x1c, 0x1, {0xdf, 0x1, 0x29f, 0x800, 0x2, 0x3, 0x7, 0x3}}, {0xa, 0x2, [0x9, 0x7f, 0x40]}}, {{0x1c, 0x1, {0x55, 0x8, 0x8f16, 0x4, 0x0, 0x1, 0x3, 0x8}}, {0x14, 0x2, [0x8000, 0x2, 0x5a, 0xbff, 0x4, 0x8, 0x66b8, 0x3]}}, {{0x1c, 0x1, {0x3, 0xf8, 0x2, 0x6d, 0x2, 0x1, 0x1, 0x6}}, {0x10, 0x2, [0x1092, 0x1, 0x7, 0x9, 0x7f, 0x9]}}, {{0x1c, 0x1, {0x83, 0x2, 0xfffb, 0x80000001, 0x2, 0x7, 0x6, 0xa}}, {0x18, 0x2, [0x0, 0x3, 0x0, 0xe44, 0xbfe9, 0x81, 0x2, 0xb2, 0x60, 0x3]}}, {{0x1c, 0x1, {0x0, 0x3a, 0x3, 0x6, 0x1, 0x2, 0x1, 0xa}}, {0x18, 0x2, [0x240, 0x447, 0xb3, 0x7ff, 0x81, 0xb, 0x3, 0x7fff, 0x200, 0xa83b]}}, {{0x1c, 0x1, {0x0, 0xf3, 0x9, 0xb, 0x0, 0x41b, 0x7ff, 0xa}}, {0x18, 0x2, [0x258, 0x4, 0x71e, 0x1, 0x3, 0x1ff, 0xf8e4, 0x4, 0xcada, 0x8]}}]}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x8, "db5809056215b878c8df0c4565f41fc8"}}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x7}}, @TCA_RATE={0x6, 0x5, {0x8f, 0x9}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0x43, 0x9}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000001) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f0000001d40)={{r9}, "e8130c80adce7f12899b1f90dd0ae8138607b67b72a255962e70812a03f58bfd9c9a636c65a88cd965a7114264a8ef0be3dee11bd98ee9cc6acfc25b8f7b78bfa8fcdd6a1c46723ff44a20ade7227d342060ce7ecba06fb90d3f6ad7833cd3fe375f875d806cd7453a32915f522c5696a855c0f846cf68af105b1bc686886e86d9301cef204c578a318fb8e715e1a9a7481f31a0b2e9b30043847dce2ed61a898fa6f4df4fac6c4f1b451c5c6b0b7bd170e752b4bc3243b504645df51fe5c1fd02f5a0f37eae00cc70cee2e19992ed3a4b2abc2155961c59b8f2fcb0046ea92beb9beb9b75e77ca12a1e3b42349095cbf7ca4f3995d13e13d4b2d2693afd42213c8b7be0213cbe59ad12b07ca3edf766d395f4398654d3028dd29460987c213cef8b1c2732c5c85b2ace578a6e0878642771e734c8445dc3ef1461b670f7e5b94638dc7507ad982a486195acbdc8e6fa205233fe8e57e28c685e50fdeebef290a8913b99fa744fd8c90f33da888ee0a2e210021c371936af49f912e53163fb38def28b8bca81b4c769552dae7a1e1e6b0b16c6402d1124e03b829a3f6afb352091368edf1647c5daa185f116fbc4ffec2dd172c49d6f3abcdd744fb87e14c62a09671d6ffdf70a8c09f38f093854ed65a5a0fd7c4c87b462e22946aac1a5d8522e6bf2575eb1e8dbcfcd1cf35a0cb46605a20cd68977b43e73c2694e600745e83821e0e06be948b488daea8caf6c992874a6a830bd46e57dda5738baa6c0c3d927fb9a16b000c6b6561a4bfec1ee9d280887ad41f41124b36f10ce347eaa978aee554fdc59c783a2e849dbbc31d421c5c60d3a04a317d9718ae4be8c465065ce0d2dd3e0cd0e696b2787ef2e07d7d279985f0dae3b500a7e484a3936cf138b7c3c457d67c5c3f39c575a3b768e206edf17bf0d641ab34e1e972bb1bd29f2ddc667e980e2879f51182b5b2f8162e83055805fb55a7f8500d3190c5c7453cec2374cb42ff33175b474ef6fd3a2e4d4ab6f7fc95f633e66a71be825ba1591a6dac795c1901ec8a411e6f19a115c8c6a4d2172600ca54011b22c5f4c9c4ac97596430df9815b82f5c7cf83901ed45adcd8b5d08bd59d12ae9e4d18e5d00972706a9c1e149a26dfbe12554cbd38d14c94fa0e04e41defaccc597ea853cb506d6b1989c3f422232971b34fd1aa5302c513768f553e8fe4ae98db5755bab315ba73f65d5042ed5c40617187843a6162793db7386402665934a111f73dbce788aa2914c104b4863f7404ac344ca0d4a73f4878b3ee247a46ac2287e3b0b811ac6e74dab518f3351512b2de977f2cd76e850fedfe199be70f3a692cb9777b591e405478d8e7bcf9b0cecf5dcae24ce6e4023371a5484ed0660d6724fd6e02540505e00d89610a552ae5f22d117016d33434b012e6dd5c02be30ed844d688cda7b58c18ade58014022ec06ec53b15063980fc961c31580bd1fcabcb2a543d3489ce82106e11cedfad3951d3ba840a8ee095e5fd60f3d1b90e7ad9320f57f9367fa7725e6297af73b7ba195a7284cc446255c21d21e2bcfcaac9bddb027113af9b3090afbaeb0351efacef64c63323f466282539b6a04f873aba225df4cdebcf507223c17df34ff19175afb57681288bba97648521c49b2f67b5198b81b451bd55352d6d266093e00d30e2fc46f2d8b7542819039a1c252f7d82dec24697b3eb91ebfebdefa2bed7bb51da4d4544167aa61f512ce1137f46b3401d94ea6141b83b6f78eb0adeac5b6952900037b58a979e22674c024496f6f70de3311c43d22d3fd2712777acf5d3e895e8206b0a8980e3c6389170b3e0d5bc0a8edd906600ec5b766d201ae774473ee947f31a11417752d71949085ab7c5139393c3823cdfabd80af39266cd1cd3a598bbf79128f90f0f465c446598a869c7b8d53c20775e80f109af264df18ad2a4da162ad34b8300e5390e2bfcc3a86d230a86d4365480349b9d3ecefba7e9f1f5269b57b2b09178d419b1d4b1bc351efc5e3b379ffbcddd928158fd215116cd51fed05e789c5981d9a66c86527a59822af6be9871929e0a12fb577ee89e3afae383a9f73a8a3dca0335b772443fd9246b0562f9b111029ef548b0ad4d2c5be34df39ad0d9a47e9c2c2fe6f429fd1640c62b8b0e4b3346956e7560029d8187e858123bccb91f11490590d14109115b76d78f28a3b7d2c02b64e91dc62fec837be2a8f06b7bb5346f2c7ebd77749fd48aa8056b87d9fa3691c7b0e7e1ef19001a6372c674da839a02ff231c21f03c8d38c6b46100ce19f690c49b5f0a39e5acaa888817aa77458d9801fdafcb57a5fd5ccf5095408f00701ccf77496c4dcba345a674ee315840d370ca818a9fc2dd60f86cce58aaafabe711105668246c512fecd905b8bdcc5c402033649e7aefde5db1870fd9d2cf9c4bf4c27a46277165dc392f1a6b84cba597043238251e1f282565a515d19eb516598e4c3707256584316a9a0abad97ae9accd3659ddd271e84bb398577f1c853b61c3d1598d1d64bddd2381a927c1f113fa9abd87790a1ec2b1057b26d472546cfaa335044ec0f3c7e916c8b1cc7de7ce5d663ac615fed9af2336bbf03ddacccd6d6fde9569b85620fb3ded4815934d5491d4b42efcea36861ff72846b3d2b8bcb0d9e5704a93cef61075deaed4cc0b579ada670d2ccfbe1acb58a50765b8007821d90e7f1dbab2dbed3c460743bf51c087d2f3e8c041c6f590b6e93a48607e27fcbb8bce13e16cdfa1068118b5e9d3a8baf6577c9addbd04baf7a5be41e9352aed4139e28aec7c6ab1028b9d3aad1e529d312dc09642eb19c2ff43a5eea1e95bea3291610720b6092a1a8c407d945f469f3da7fe0bc8d19a932dc8c5425ad548b74f4e8f56ff3388a5adb278b5f7b8eebd3b6a3defdf97be30082a403199649f2e0d8614f6519859bda489151e0f0c92370de8ec768300dcec541c3bab8d9efa6d42beeb63632b3582612a56c1178f4b69998fc59983a57c61b159685650d683fa004a24319a7bbe7e681954136ce1da05c66ab6b153a51a6ce804f7528caedb730fc384d34cbc4186adf1a562d16d34e74e47bbf6925a87669541a19f1da998524f83dbcaaf6ac71ff429afaf22f4183aebee97e0042dea1867baf2197403ca397f81b676c4b359af438fcd58c92eb2b2ef3ed9bde28269c7705320ddb9bd9e6f6cb8772cd40e8e6f797421e736e2bccca4b42c00d9fe170186e8e4eb1d303657bf841022781a01877c3381831eb71568faa3ecfa46dd813a2cad8c4b7593f4d38fb5b065514563f75f1285c4fd4efba35045bb231589cdbf62ca6aa3d32556208334e001ec073237765ed70526773bc793ac8cbdd54b76f92ac8a9635642f10f3ae30ce30e3182aff35a713a5774c11eb787c32e505d3cc3e99eedd677c9ec8d3acaa987b51b9e213599c1754a5afc31adc5d983bcebdf7842ae3f703faeda94b5e3a1745cb355b543dd5744dc724b6d167e80c601358ace384add8267dfa4f2105c292bbf0a3e5fe7168fbe24db9e94a08cae8624df7eb2545ae5756941508bc16e5c9460ce7fa61d87a6d03f8a3561534578c8e3d9af4558a3bc92656eef784872c81d6db9af1d92af9ecebeb5eb2cbf2c1eedef8cd4f92d2a756ab8499456a2dd3ec966b18e93c5c9e83969d8212601405bf3407b08633b050137ae49293e34c14cdbd92ea3e84ba337fef319c483c87140a8e376aa50004ba121da6f2e7b0612f38be15de114ab937ea11c45002c7978d2ec7abc618aca339c1a9ef692ce94cc8e24c6aa1ad15d0ebcfcd30a00ea6617412c8881f7e24d61355f0434b84ef089393caee26e40a2997f470f8b0864248b8d3529c925071eac33b82b506c4bb74aa01b31cfa3f2d78c6e3a7431d56b5cd71d8cd0c9671654ee691c6cf04e9e58255feb3276662cb3f9cdb6e29e289ed37d54eeeee82504e7bf16c479d7ec84e53f102823bae9937f0852df868d99cb56e062dc3b57c216d884b912d278ff6abe6592e3a1393c2878ea834e897afc83958c8b115bd0890ef6e6a791f6f8379dee787d2001deea71d76cec381a6b15cde260d226d9e0303ac1209e453f39717407e8a3c8c2f50e168381cebfe8ffd8292ee30d4a5972981dc237eef43501188fe239de2421eeb3b09d500899599a99f3144fefa3be94698d9bb7b28012292a842f56292d33cac97e4114766bc64ffc5beb7d371e8825db99194c0cc589f09a3357216e8b66ac7918618fd68b2cec7f13d38a6900787e838d91b562d60450bf0036065ec2986efaaca02653a3775931ec6431b90cd701eea8cae379fd55bd32ee8284e1a1a234ad68e24f03f336c544f2f375f5115dbe7921ee4c8acaaf3b7fba27800c11d669b7b92d6842edee611daff75cebc7c31ffb80735e5fec8fd9f6bdf1e210fbefcb869686adc6d72c2c599ad357316109a1143325840f51a6f9e36e40ba7e3fd0790dc2da6fff4d0b2a6620a026c68345a7fe2b4108fc86f98d567af65dbc740be8166dd7aa7158dc663719c03e2d2eaf3a51eeb5ae87b6e272c8deb4612bc8c2627cb530c3a6a5a9e6bcf3057fff1ca3de1ac9b9e24650caf4cb026eeef9287c793a873c97ed190a9a2d03ac3a1dd947c827435c0d9a7571cfbb03e051bf3faa834fd08c4ea235e0153b25177732e7549051380de58557e83f9822659d7e57ff455281423a2a89886e21576a1fba0b7ad74bbc1516072f4393010c3da38136d0f1a140be4c86fefc74a6cc81450cecdb4d801c978684afee2d0f65d547481e3e293cbf7a3115428ab878da3b56d10fe404d06e55ad6240bf08b14ec9f38f651bf344833b886395df40c53a4ea386a997a28fd6479382c1c60a851486430a67cc81c07715c44775f1f610ebf7817f184484e70d447f4c684103f415824d6e3efd89bc295ba1d6a211f840bb3f8687f5b9029d3dd5cf18e5ef1b5ac4dba938c201a1f4ae5b88a22f40a31de9f57c2952ab04870ccf2b9c222a231a1f3d8a5e3fc7fb78c4935496f4001bb2cf53dff56dc41400eb883ecec46f1aa96a7b40a466a21e1e925c84515b97e48b83afacabf68ddade7bdd4f0fb48a12918888c8ab10a7f3efbd4bfba1341bb2b6d496a6a3f9a5648f42f611229b5fbb74dcd2e017a55bd5ea3042fb39fc09101963978e541f202cd1f792e43e7affbd970b6f1d088344817db2bd59909905f40bb4b4bf04dd13952532dfc64302c14efafcca5ab56d134f5bad4e9a716132e3aa8c71620add87b80243d575a0c75ff8b402ce188d5ee3cb1b7dab0b567894aaaed77cc3ae67e011bce1bd5af38dac05668165adc6586eb6c567add51c2400554c0aeba22c8e7a0fcd35a7481fabbc972e1437b1e0353ac1625eb730746888614cea4d6aa90d7a19ea2e631b0b8966d8ea67308f98c7c030c941bf3ee468bb1c1daeda7a5d4844bce7c884a2d51c4052e6ea62a8d5186fb8621b03ca681a4ea7264db296a1f2d8df374bbad66122f3c6c6973645d65e8cf5351b81a84712a08ae09c5405c76c35ad1df825c843123ba1428ef105e6536472be1431cd7db6d91115012b1928735a803d92d8c488d43c0700495845f5e5dec4d5d38f66b54f87681b8c41c73790baa35be333c33a6f9e32497fc3b98048f6b4678c84eab82b7fd8d2ef59af186163b439711b1d4c057145f968dafc28ca6b34a4e86a10e0c2ce613fa534fc575dfafe9d1cfb20a6e22e9579d24df619f9004a76d2f9fece1191cd8315a5b6ca34ba21ceb6de03a8b57c8c8"}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000002f40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e00)={0xd4, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x7, 0x48}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0x94, 0x2a, [@fast_bss_trans={0x37, 0x8e, {0x8, 0x3, "8a075c8bc0a70b365a7e916e4320c522", "176f6daaba652098cfaae27dfd93c5f806784aead23b201b96df9fffa697aad5", "76c91e9c5d911eb4458d391a1128e4c48aac62e1a45d0513e2305adffd59f79c", [{0x1, 0x17, "389b8441800a0c3c76922e838e9b7c410e4089fc51c742"}, {0x3, 0x12, "1b66eb77f128b70c28ecced82849e46c1364"}, {0x4, 0xd, "e611e5093e88006f5abdb315a1"}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008044}, 0x8001) (async) r12 = socket$tipc(0x1e, 0x2, 0x0) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) sendmmsg(r12, &(0x7f0000003680)=[{{&(0x7f0000002f80)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003000)="6f6e47b4d2323ecedc7ee7a3ec8fe180f5b24d58ced20744fbb537fe25909d652f42dc5b8012563e6eb63ecab2a2d45afc1278b141e0939df9ee1cc301c1f58e5a4c4a1ca56189f0336f0d645f6ed3529f0469469623946aa971e39ed8359843effbb908ece6d2c72219", 0x6a}, {&(0x7f0000003080)="a628d6de61f221be295acb03d2b0f2abaa2a25ec2a57da1f0d59a79014982644c4003283b687b7b58104613700a5064f17a497acf68079586e72e5050b2c96ce8de331b8f3f41cde149cae06821124d3db32440d312a92aea81a57dfae", 0x5d}, {&(0x7f0000003100)="28ada18138690e252e1b18492224d79396543806d0af5a7644379266a2a70dba2f187f14d9060bd6a614cb3e", 0x2c}, {&(0x7f0000003140)="1fc85377581509d4ff67fff29708b1c86b1f9b46243f348a98011af402f59d", 0x1f}, {&(0x7f0000003180)="28be1c595054cc72aa9f2b9a3e816d534a0c65f33b9001609015898ed78e7a76f0ba2093dbb01b8f1a8184d5e254be7c1f0570d8d75179312230fc69ca8bf5ceb2f318c2293874ad92011464d60437a8df7bc1ed8f7e01f25e1db2f4553985f386c7d584f89cf628e61542ccf04c4f3cc9de6b796472eb47f21e313d7679cba1ca1315b31067b50f79a1847ec47b080657dec50e2f1c", 0x96}], 0x5, &(0x7f00000032c0)=[{0x10, 0x88, 0x4760}, {0xf8, 0x10b, 0x6, "fcfd574c917e269a420eecd6e4430450f685ed4bcd271986e233f8aa740f38c7911f17b5b998ff45a6ec2456bcaf4c0c831f141143be94a0158f2a328c43cf5550dbfc201b3b213340c7b13ef5a6463814f73096f6529ee13e50b6b2a753361beb07d8eb7b4fb4d3309f2569043745f568d8caa10499f7f9285945d9018c33ff7efd5ceefeb86560b0f49cd48fa1e2e68f73b88ca983b8ffffafe40cb61ad74ea8a5651af80b7cf18db74c62fc94d40d0fbd9d4810915731cdd4f1be07db594e82da4e35397c8ac5e0035f8ff20d44cb242bb5960ad47538258e3ea1d6e89ef46a177efaa68a4979"}, {0xf0, 0x102, 0x1, "7e161c02d06011960aabde65ec28fadf9f1ac05e00a56836a1c8f00fdcfad52754326b9fd8cd2b56a7131ba94337d4ac0ca5014f2b7bbee2d9fff98cb4cf73889f910d270be44ab219ba2549927ec4761430ef575a43a697a04f066775146381068fcfc4557913eec0266b1e53e7b94c613ebb246eb62a61758e453da86e21bcb63361bf874639d34633243450c40941dfd678abadc338c86864f9c9e0ab58930631ee65b857f8b8a56440af3c280bcea74225ab9dac01f44c48474d43966b01f6bae66bb61b1d28f5cecf4fdfe07303f82e4971216cba5cac7f"}], 0x1f8}}, {{&(0x7f00000034c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003540)="2d493bfd0206103bf6a5358f58ca96a49b910c2c41b76f541d4b8e86e96b5545901b0a3569fd180e61ee1306eb4430d2ecb4fe7ed83c11e84515e83527ed182dd8bb654f8cc71eb391f6ff68cd21debd73564c87bd745a10c8cdff3da7550800e3929481b8bc8fa61688d58c33d9", 0x6e}, {&(0x7f00000035c0)="112bbe7949d6cabcbf337ddc0401db507211bbce970ef55e9888ffc5a46a6f6f4a6ca7972e66d5ab50ea230be99d7d043a8d39716fcb61052d335d2a02e37041d3e41d5222940c4bc25262fbf5a7c81f318754b4216c1098f91fa9f79b0b86e850203c649d", 0x65}], 0x2}}], 0x2, 0x8004000) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000003700), 0x4200, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000003740)={'macvlan0\x00', @local}) (async) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000003b80)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003b40)={&(0x7f00000037c0)={0x360, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_TESTDATA={0x92, 0x45, "4db412b99bae251947c419fb5cf8fde61ae6969b93ecb7853e09a4097cb1dd6ecb8264fea489ebe0675b4506a8492b6d1398d4bf5f07271fe038123e6aa060f1cbd839a8d77024f5d445cc13ded6259966ed3a36e6c389ee2f12e04eada743f7794c997e92506933c3230575524d77c22dca7f96d74550df4c184f4c75ee064af94e4279ef4ff25af3b1015d1ddc"}, @NL80211_ATTR_TESTDATA={0xe9, 0x45, "c28aabe7dfcf62ba5f6ea29d817b20c2037ab63e7146eb3245ec8aeb53764f3190e277ba0176b62f55da4e8898141ca87505a3122d652f77ec19d5dd16fcf318700d2101a64bcb259259618b6436af5726753de9a162e35d28045e452d2d2ea4780762d3f9a9b835df09c7a3d1d7c7ebb0dbfa8c6f83fe70ec9d9085444c05db50a7f9dbfefb128829a634fae921f6d191392146de08a049a40ebe0ab082f2b81cf01871c9d2b08a97c35460d711b0e3214e1a2d0b2468e52a1f9fdfc907e922eded585a1cc25dfaec993b74252d0bedc8ddc2f1bc51f09dc104f4cbb5eda7a9475f50a6db"}, @NL80211_ATTR_TESTDATA={0xe6, 0x45, "f97be95926ad601add132596c7b2871ac4c342250c35ae836f36f7b3dcad90ee3d8125f379445a12abad8439d229a9db4935b0e1f56d5464da495be469367f79c35dc342b036be15d5e4045a277029be6cdabaa929f43858050d220cf8961ea02a92386904b1692dcbf84156520de3799eef01cb73e30372f58f96ff61c557a1a2329f37cae35fc2a566f4afcd7a26c30547ce9f0956faa0fac31c906bed36ad5b8af804bb0598a8df66735043dde563288495aac00d868e3be2eeed0e3ce8463151e945defec7f3f35aafd3d9de379cfdde51a01f2251111ff2fe44f2069aaeec93"}, @NL80211_ATTR_TESTDATA={0xa, 0x45, "9f1e36bebaf3"}, @NL80211_ATTR_TESTDATA={0xcc, 0x45, "9ed97f6300fb615a6d4f9f73bf4e1aec4c33323fb701201ed34f8452f5914fa8b92dd47ffa15256401671378e69dfdeafd7c5aa357b5030b91b2d229542bbb5cd93ccd4942bd8ed2e7796da15496ce2e7346d78728fd4fd036b6ae42a68edc5a1af5869e62ed3451cf167774b7bb1d349878e6924bb70f7f2ad519d12e0f151e2b8e5d510c9a5afbb6c0af80fb1910c4cfee9a41e43c7bc8444d5042f51881d0c7ac5a19c41c1d2305a7c9af5b1a6477140ff90dce60f3937d84c314c4587e1174c927994e2b3299"}]}, 0x360}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000801) (async) remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000005, 0x0, 0x100000) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000003c00)={{0x1, 0x1, 0x18, r6, {0x0}}, './file0\x00'}) sendmsg$nl_xfrm(r6, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x40012068}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c40)=@delpolicy={0x50, 0x14, 0x324, 0x70bd29, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x4e21, 0x0, 0x4e22, 0xfbe, 0xa, 0x120, 0x80, 0x89, r3, r14}, 0x6e6bb2, 0x1}}, 0x50}}, 0xc0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000003e40)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x74, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) (async, rerun: 32) msync(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) (rerun: 32) 4m18.916387723s ago: executing program 1 (id=3723): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d000000850000000f00000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r3 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x40) fcntl$notify(r3, 0x402, 0x8000003d) write$UHID_INPUT(r3, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m17.288150416s ago: executing program 1 (id=3727): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20000) fgetxattr(r0, 0x0, &(0x7f00000001c0)=""/54, 0x36) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 4m17.0186268s ago: executing program 1 (id=3733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x400, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) epoll_create(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) write$vga_arbiter(r7, &(0x7f0000000380)=@other={'lock', ' ', 'mem'}, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 4m16.995839447s ago: executing program 35 (id=3733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x400, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) epoll_create(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) write$vga_arbiter(r7, &(0x7f0000000380)=@other={'lock', ' ', 'mem'}, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 2m47.364155472s ago: executing program 6 (id=4321): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x1407, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 2m47.245714062s ago: executing program 6 (id=4322): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) r1 = gettid() r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) read(r2, &(0x7f0000000080)=""/201, 0xc9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r8 = fcntl$dupfd(r7, 0x406, r7) write$cgroup_pid(r8, &(0x7f0000000240), 0x9f7b) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 2m45.417979741s ago: executing program 6 (id=4326): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x18510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x8001ff, 0x0, 0x5, 0x8, 0x23, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffdd) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) rt_sigqueueinfo(r3, 0x10, &(0x7f0000000100)={0x5, 0x6, 0x10000}) 2m45.288013689s ago: executing program 6 (id=4327): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x0, 0x111) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000005040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a010200000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a30000000001c000880090002"], 0xa0}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x26c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x258, 0x1, [@m_xt={0x148, 0xd, 0x0, 0x0, {{0x7}, {0x114, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc4, 0x6, {0x0, 'security\x00', 0x3, 0x5, "5c0d9914424d1d383854959ce9842dd5c89eb3eb363dcc74caae5131cc8c0969986647179c976c9a53bd297b2c0852ff4c61116ecdaef2fa0b60637b31eabf66c3c4eb31edd3444a871797dcdc501be42cbab1d6a84882fe61f78d44ceb9bb0733a16af54e5dd8f1afd5390201d927668fd8ae7ef7c3cfc3ded167e63446e8244a5750651a8470496b119b1bbcc483f464bd7bb96a852b1a3d5e"}}, @TCA_IPT_TARG={0x4b, 0x6, {0x4, 'mangle\x00', 0xfa, 0x9eda, "c1e6624db96f63e701db5370d81419d98ecf063a82b928bce3c2bffef74c492089"}}]}, {0x10, 0x6, "d543340e5efb0bc13490de7c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x10c, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15b0, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ddd, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb8e, 0x4}}]}, {0xbb, 0x6, "04a57610c7cd2c238757995b8431742b987c6f06b4c78ee59fdb47c45e92f4c37ceaafa1dcaa3695abe9aa013cb1fbac305f2549e994492258392ce4a3fd1f2f4d67c7a5fb1fbad0d6574e3f5419c32a0fd232dd2f15123fcc55747e0639cc0789dd4603985667775a93a589ff6f205870e68bf158fae7c4458c9ca18f866e3acfe5a4ac3eeb97ec063d8d26b66d2eed8a513c9c8efae2d977de1267a385bf62648923b9ad08252a469822c23fae3330853c6350a5c005"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x26c}}, 0x0) syz_clone(0x40000, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f0000000a40)="c55e570b807ae570ebcabe4f28dacc21ed47632160a1") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x2, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2m45.076366833s ago: executing program 6 (id=4329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f0000000000950000000000000050175cbe4570156753bf42fba9e945659eebefe55d1079731dc74723457ff9d0b01648970c81cc010b420687f9131d55da1b37b4b43b9f77c73fc3790193bf701f33f41fe6bbdfdbd788e73df1ab2109c1d249136d3e502f61d4fbddacc2613a611b2c4abe1748221de1795db0aaa0c5ef008cbe9e13b4a9143b45a1cd6a8207872e9e4c97f06ef3d7461c0a1ce58684e135e8a55ee6740ccaeb5e850fc39590f70c5ff7957da3074d02e0eebce9f3c21fd298e2ddf144b13b94e9f1eea7aedb141cad4d9ea1bb3acb34"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000000000000000000000000101fe8000000000000000000000000000aa00004e22000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1000006, 0x10010, r1, 0x25650000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x42031, 0xffffffffffffffff, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xf000, 0x863, 0x0) r4 = io_uring_setup(0x22, &(0x7f0000000300)={0x0, 0xcc6e, 0x1000, 0x100, 0xf4, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0xffffffff80000019, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 2m43.224126967s ago: executing program 6 (id=4335): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x7, 0xb, 0x7, 0x13fc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r9 = dup2(r8, r8) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m43.163911037s ago: executing program 36 (id=4335): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x7, 0xb, 0x7, 0x13fc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r9 = dup2(r8, r8) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m53.618473556s ago: executing program 5 (id=4733): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x8, 0x8, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @local, @remote}}}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0xa}, 0x106260, 0xfffd, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") r4 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xd4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000844}, 0x40040) ftruncate(r4, 0x2007ffc) unshare(0x20000400) bpf$MAP_CREATE(0x0, 0x0, 0x48) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x80000000, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000007c0)={0x7, 0xb, 0x10, 0xb, 0x6, 0xff, 0x6, 0x11e, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005040000"], 0x0, 0x37, 0x0, 0x1}, 0x28) sendfile(r4, r4, 0x0, 0x800000009) 1m51.612134494s ago: executing program 5 (id=4746): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xa5, @remote, 0xeca}, 0x1c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x1, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) (async) close(r1) 1m50.608290643s ago: executing program 5 (id=4748): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2eef000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20000000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1210852, &(0x7f0000000140)=ANY=[], 0x5, 0x23b, &(0x7f0000000580)="$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") 1m50.608049493s ago: executing program 5 (id=4749): dup(0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe83, 0x722}, 0x2b10, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 1m50.244083231s ago: executing program 5 (id=4751): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000001000900000001"], 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) 1m49.711939901s ago: executing program 5 (id=4760): r0 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffa, 0x80, 0x103fc, 0x3be}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x198, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffffff, 'ipvlan1\x00', 'gre0\x00', {}, {0xff}, 0x5c, 0x2, 0x50}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xffc0, 0x9c, 0x2}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x0, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x57, 0x4, "aaa71fbd3a4e23fabc0a40a53e01733858e0bfafcaefeecbefb863f2de6e"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0xb, 0x0, 0x4, 0x3, 0x1], 0x0, 0x7}, {0x4, [0x5, 0x2, 0x0, 0x6, 0x6, 0x2], 0x2, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140)) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4}, 0x80}, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000010640)={'vlan1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x0, 0x7c1, [0x43b]}}) r6 = io_uring_setup(0x71bc, &(0x7f0000000080)={0x0, 0xba63, 0x100, 0x3, 0x195, 0x0, r0}) io_uring_enter(r6, 0x3781, 0x10f5, 0x1, &(0x7f0000000100)={[0x1000]}, 0x8) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.645150399s ago: executing program 37 (id=4760): r0 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffa, 0x80, 0x103fc, 0x3be}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x198, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffffff, 'ipvlan1\x00', 'gre0\x00', {}, {0xff}, 0x5c, 0x2, 0x50}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xffc0, 0x9c, 0x2}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x0, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x57, 0x4, "aaa71fbd3a4e23fabc0a40a53e01733858e0bfafcaefeecbefb863f2de6e"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0xb, 0x0, 0x4, 0x3, 0x1], 0x0, 0x7}, {0x4, [0x5, 0x2, 0x0, 0x6, 0x6, 0x2], 0x2, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140)) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4}, 0x80}, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000010640)={'vlan1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x0, 0x7c1, [0x43b]}}) r6 = io_uring_setup(0x71bc, &(0x7f0000000080)={0x0, 0xba63, 0x100, 0x3, 0x195, 0x0, r0}) io_uring_enter(r6, 0x3781, 0x10f5, 0x1, &(0x7f0000000100)={[0x1000]}, 0x8) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.848316376s ago: executing program 9 (id=5636): socket$xdp(0x2c, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000000906050000de000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 5.823542261s ago: executing program 9 (id=5637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000400048008000200010000000800010000"], 0x44}, 0x1, 0x4000000, 0x0, 0x40000044}, 0x0) 5.721099194s ago: executing program 9 (id=5638): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x8, 0x8, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @local, @remote}}}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0xa}, 0x106260, 0xfffd, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001900)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xd4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000844}, 0x40040) ftruncate(r4, 0x2007ffc) unshare(0x20000400) bpf$MAP_CREATE(0x0, 0x0, 0x48) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x80000000, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000007c0)={0x7, 0xb, 0x10, 0xb, 0x6, 0xff, 0x6, 0x11e, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005040000"], 0x0, 0x37, 0x0, 0x1}, 0x28) sendfile(r4, r4, 0x0, 0x800000009) 3.826211251s ago: executing program 9 (id=5656): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) connect$tipc(r1, &(0x7f0000000800)=@id={0x1e, 0x3, 0x3, {0x8, 0x1}}, 0x10) r4 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xdb, @mcast1, 0xfffffffb}, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8001}, 0xffffffffffffffff, 0x9}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.82188884s ago: executing program 4 (id=5665): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1a6, [{0x4, 0x3}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x4e, 0x300, 0x1}, 0x28) 1.784381024s ago: executing program 8 (id=5666): perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x10000}, 0x106200, 0x10004, 0x20da, 0x44b63e3b9a8f233e, 0xa, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1200000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x28b9}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usbip_server_init(0x2) 1.694346338s ago: executing program 9 (id=5667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r2 = io_uring_setup(0x71bc, &(0x7f0000000080)={0x0, 0xba63, 0x100, 0x3, 0x195}) io_uring_enter(r2, 0x3781, 0x10f5, 0x1, &(0x7f0000000100)={[0x1000]}, 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.512379818s ago: executing program 4 (id=5668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x12, 0x1}, 0x40008c0) 1.512098557s ago: executing program 4 (id=5669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="210027bd7000fbdbdf250420000008000800ac14142508000700e00000010800020005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x0) 1.363579502s ago: executing program 4 (id=5670): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffc}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0xffffffffffffffff}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x0, 0x0, 0x3}}, 0x18) sendmmsg(r6, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000001c0), 0x3}}], 0x65, 0x811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2, 0x5, [0x0, 0x446, 0x1, 0x1abd, 0x0]}, &(0x7f0000000040)=0x12) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000000c0)={r9, 0x2, 0x20}, 0xc) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSISO7816(r10, 0xc0285443, &(0x7f0000000140)={0x7fffffff, 0x800, 0xc, 0xe00, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e1e, 0xd6f9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, 0x1c) r12 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x5, 0xf}, {0xfffc, 0x6}, {0xffe0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01001d45c80fe8eab163f10000000d0000000000000c08000300", @ANYRES32=r13, @ANYBLOB="0500380000000000"], 0x2c}}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x2, 0x1, 0x3, 0x13, 0x0, 0x8008}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 1.217636217s ago: executing program 4 (id=5671): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x80000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x100010, r0, 0x6f7d1000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x80800}) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) (fail_nth: 9) 1.100522657s ago: executing program 7 (id=5674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151700000000000008000a00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 859.950027ms ago: executing program 7 (id=5677): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0xbac8, 0x5, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x68, 0x0, 0x2, 0x2f, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x20, 0xf8, 0x0, 0x8, [0x9, 0xfff, 0xb67, 0x8, 0x5, 0x0, 0x8]}, @end, @generic={0x82, 0x7, "8dc4f92099"}, @rr={0x7, 0x13, 0xb, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0x6, "9eff023c"}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private2, 0x191, 0x3ff, 0x3ff, 0x100, 0x1, 0x4800000, r1}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4884}, 0x8000) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x80080) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x74}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf047}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20004005) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000440)={'\x00', 0x1, 0x3, 0x8, 0x59000000000000, 0x100000001, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0)=r5, 0x12) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x9a, 0x1, 0x5, [{@multicast1}, {@remote, 0x6}, {@multicast1}, {@loopback, 0x1a9}, {@rand_addr=0x64010101, 0x10000}, {@loopback, 0x7}, {@private=0xa010100, 0xf9bd}, {@multicast1, 0x8}]}, @noop, @noop, @ra={0x94, 0x4, 0x1}]}}}], 0x90}, 0x0) connect$caif(r2, &(0x7f0000000640)=@util={0x25, "4b47ca358112a0de862ac56c84b5a52c"}, 0x18) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000007c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x404002, 0x0) write$tun(r6, &(0x7f0000000900)={@void, @void, @mpls={[{0x7}, {0x8000, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5c, 0x0, 0x1}], @ipv6=@generic={0x9, 0x6, "938acc", 0x231, 0x80a33824ba255f70, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, {[@hopopts={0x5e, 0x2e, '\x00', [@generic={0x4, 0x7c, "7fa6f91948ce030ee14e3c28d86c2f9de898391ac46b0f8c0d68cd2e6e92ad2a333692f17f7eac48114f7b3c302a6008f384dbd19752b13ab30b7e0858aefcef9d0f60c77971c62867efbf73c8d1a3f63fd12124689114a17f5a644f47d93ec1727d7cebef9e8c8987a389feb8b4ced755ee7817e59056fdd0924390"}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @empty}, @pad1, @generic={0x2, 0xb4, "9535ced74242aa55b2663a5c636cdfb00ecb1c10a75530b19b0710d45548384cf888a3fd22be2f731cc4ea5b1b976142f60af5c68515f59924381c526bed92b58fe498abcdabadc8895b6f101ee41bf9e4376411622f0f32bac1ab4df910299f965b3ec0a4d09afd6452fc6b007211fe3c986823198527d72ea923790c36fc8927a509bb3e9ee0d221b350dbcdbd655aa39997014f1d8d0d38f1c30c1271b0371556fce1938b72bf9efb67279e0afa67a6585d81"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x9, 0x21, "63fea44e8e2d459e8bd61631905b51fee9de2b35a0cb0b61a63dbfc0d22fd30bed"}]}, @dstopts={0x3b, 0xb, '\x00', [@generic={0x3, 0x15, "c11ef96c0417fc9b4b78d5e890636cab0732581155"}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @local}, @pad1, @pad1]}], "66c49362f0bdb80bd8c5a2218399936858728ab2c43be596ff1bb5bc019db4e12e813cd2e29d6a0ee6aac631774f8b35a7914a1e88ddec41dd19a45f77eb8e4b9f20d0495f8300caad"}}}}, 0x269) setsockopt(r3, 0x80000000, 0xf, &(0x7f0000000b80)="7533a805fb880e35744b728cf59fec", 0xf) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000024}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r8, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x54}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) readv(r6, &(0x7f0000001f00)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/194, 0xc2}], 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, 0x1411, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x80) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000002040)) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000021c0), 0x4) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000022c0)=@generic={&(0x7f0000002280)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x1a, 0x4, &(0x7f0000002080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9a20}, @generic={0x7, 0x2, 0x4, 0x200, 0x7}], &(0x7f00000020c0)='GPL\x00', 0x6, 0xb8, &(0x7f0000002100)=""/184, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, r9, 0x8, &(0x7f0000002200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0x4, 0x6, 0xa89}, 0x10, 0xffffffffffffffff, r10, 0x1, 0x0, &(0x7f0000002300)=[{0x0, 0x2, 0x6, 0x1}], 0x10, 0x7}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002400)) 834.593862ms ago: executing program 8 (id=5679): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400000000000000, 0x0) 750.174238ms ago: executing program 8 (id=5681): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fe00000000004801feffffff8500000029000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0xad9840d16f7c11f3, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 749.687528ms ago: executing program 7 (id=5682): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.redirect\x00') r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0xfffff9, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 667.633004ms ago: executing program 8 (id=5684): perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffe, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 666.608404ms ago: executing program 9 (id=5685): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x0, 0x8}, 0x101c, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 616.373145ms ago: executing program 7 (id=5686): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000800)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)) 616.015135ms ago: executing program 8 (id=5688): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x200040, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xc3) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffffc, 0x8003, 0x0, 0x4a, 0x5, "08c956e2fb9e1d9a6a84282758a862364727a3", 0xac}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xd) 594.274911ms ago: executing program 7 (id=5689): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 557.864495ms ago: executing program 8 (id=5690): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x42f4}, 0x38) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x20010010}}, 0x1c) 488.150303ms ago: executing program 7 (id=5691): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) statx(r1, &(0x7f00000000c0)='./bus\x00', 0x400, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r4, &(0x7f0000000440)) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) socketpair$unix(0x1, 0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x5, 0xa659, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x700, 0x4, 0xfffffff4}}) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9010, 0x12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x0) 291.60824ms ago: executing program 4 (id=5693): r0 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffa, 0x80, 0x103fc, 0x3be}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) exit(0x7) r2 = io_uring_setup(0x71bc, 0x0) io_uring_enter(r2, 0x3781, 0x10f5, 0x1, &(0x7f0000000100)={[0x1000]}, 0x8) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 119.86743ms ago: executing program 0 (id=5698): r0 = syz_clone(0x8ca0a000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) (async) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) fcntl$setlease(r1, 0x400, 0x1) (async) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) (async) symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00') (async) syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0x80000000, 0x9, 0x4, 0x6, r0}) (async) fchdir(r1) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r3 = syz_open_procfs(r0, &(0x7f0000000180)='mountinfo\x00') getpeername(r3, &(0x7f00000001c0)=@in={0x2, 0x0, @remote}, &(0x7f0000000040)=0x80) 94.791306ms ago: executing program 0 (id=5699): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, 0x0, 0x0, &(0x7f0000000200)) 32.374956ms ago: executing program 0 (id=5700): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000ffffe0000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b"], 0x184}}, 0x0) 32.241326ms ago: executing program 0 (id=5701): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xeffff00c}, {0x6}]}, 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="cb", 0x1}], 0x1, 0x0, 0x0, 0xfff5}, 0x48043) 30.381605ms ago: executing program 0 (id=5702): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x7, 0xf1, 0xffff, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=5703): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x5, 0xa659, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x700, 0x4, 0xfffffff4}}) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x100000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9010, 0x12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 503][T20175] hsr_slave_1: entered promiscuous mode [ 723.060902][T20175] debugfs: 'hsr0' already exists in 'hsr' [ 723.066677][T20175] Cannot create hsr debugfs directory [ 723.108617][T20293] loop0: detected capacity change from 0 to 1764 [ 723.238915][T18674] EXT4-fs unmount: 36 callbacks suppressed [ 723.238935][T18674] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 723.378110][T20328] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4790'. [ 723.397339][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4790'. [ 723.424617][T20328] geneve2: entered promiscuous mode [ 723.509143][T20339] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.4795'. [ 723.523483][T20339] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 723.556235][T20344] loop8: detected capacity change from 0 to 128 [ 723.577150][T20339] netlink: 'syz.8.4795': attribute type 1 has an invalid length. [ 723.618838][T20348] loop0: detected capacity change from 0 to 4096 [ 723.620263][T20175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 723.638695][T20175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 723.650775][T20175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 723.650905][T20348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.672804][T20175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 723.769088][T20363] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 723.772173][T20175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.793448][T20175] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.815529][T20363] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.818180][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.833052][T16999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.853598][T14946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.903346][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.910452][T16999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.950129][T20376] lo: entered allmulticast mode [ 723.964247][T20373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.984404][T20175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 724.019164][T20175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.076395][T14946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.214612][T16999] Bluetooth: hci0: Frame reassembly failed (-84) [ 724.236425][T20175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.297490][T20409] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 725.454809][T20175] veth0_vlan: entered promiscuous mode [ 725.472300][T20175] veth1_vlan: entered promiscuous mode [ 725.490188][T20175] veth0_macvtap: entered promiscuous mode [ 725.498353][T20175] veth1_macvtap: entered promiscuous mode [ 725.533712][T20175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.550593][T16507] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 725.566098][T20175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.596003][ T9469] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.638361][ T9469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.648209][T11496] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 725.677269][ T9469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.725520][ T9469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.348448][ T8629] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 726.367378][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4810'. [ 726.415148][T20465] netlink: 'syz.8.4808': attribute type 1 has an invalid length. [ 726.509444][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4810'. [ 726.573464][T20465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 726.672191][T20473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30720 sclass=netlink_route_socket pid=20473 comm=syz.9.4811 [ 726.712924][T20465] set_capacity_and_notify: 2 callbacks suppressed [ 726.712943][T20465] loop8: detected capacity change from 0 to 512 [ 726.786542][T20482] loop9: detected capacity change from 0 to 1024 [ 726.794350][T20465] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4808: inode has both inline data and extents flags [ 726.843507][T20465] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 726.843671][T20465] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4808: couldn't read orphan inode 15 (err -117) [ 726.852921][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 726.852943][ C1] EXT4-fs (loop8): initial error at time 1772782961: ext4_orphan_get:1391: inode 15 [ 726.852980][ C1] EXT4-fs (loop8): last error at time 1772782961: ext4_orphan_get:1391: inode 15 [ 726.984859][T20482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.001341][T20465] loop8: lost filesystem error report for type 5 error -117 [ 727.011257][T20465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.088887][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.101557][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.814133][T20576] loop9: detected capacity change from 0 to 4096 [ 727.840437][T20576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.841998][T20581] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4816'. [ 727.871401][T20587] loop8: detected capacity change from 0 to 128 [ 727.905783][T20587] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 727.929722][T20587] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.943333][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.967775][T11496] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 728.008392][T20599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4820'. [ 728.036912][T20604] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4821'. [ 728.194433][ T28] audit: type=1400 audit(1772782962.903:5281): avc: denied { sys_admin } for pid=20609 comm="syz.9.4819" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 728.887315][T20633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4827'. [ 729.153496][T16507] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.297090][T20638] loop4: detected capacity change from 0 to 4096 [ 729.349934][T20638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.376351][T20642] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4828'. [ 729.422567][ T28] audit: type=1326 audit(1772782964.163:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.8.4829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd596d6c799 code=0x0 [ 729.536107][T20648] loop8: detected capacity change from 0 to 2048 [ 729.562172][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.375434][T20665] loop8: detected capacity change from 0 to 4096 [ 730.416365][T20665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.417524][T20669] netlink: 'syz.0.4838': attribute type 9 has an invalid length. [ 730.447822][T20669] netlink: 'syz.0.4838': attribute type 6 has an invalid length. [ 730.524575][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4838'. [ 730.548810][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.675869][T20676] x_tables: duplicate underflow at hook 2 [ 730.815365][T20679] loop0: detected capacity change from 0 to 136 [ 730.840977][T20679] Attempt to read inode for relocated directory [ 731.110370][T20694] netlink: 'syz.9.4840': attribute type 10 has an invalid length. [ 731.143968][T20694] veth0_vlan: left promiscuous mode [ 731.150314][T20694] veth0_vlan: entered promiscuous mode [ 731.173404][T20697] loop9: detected capacity change from 0 to 512 [ 731.192778][T20694] team0: Device veth0_vlan failed to register rx_handler [ 731.208585][T20699] loop7: detected capacity change from 0 to 4096 [ 731.281271][T20701] dummy0: entered promiscuous mode [ 731.286493][T20701] macsec1: entered allmulticast mode [ 731.306775][T20699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.325513][T20697] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 1024: comm syz.9.4840: invalid block [ 731.338732][T20697] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 731.338928][T20697] EXT4-fs (loop9): Remounting filesystem read-only [ 731.348074][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 731.348094][ C1] EXT4-fs (loop9): initial error at time 1772782966: ext4_get_branch:178: inode 13: block 1024 [ 731.348138][ C1] EXT4-fs (loop9): last error at time 1772782966: ext4_get_branch:178: inode 13: block 1024 [ 731.358364][T20701] dummy0: entered allmulticast mode [ 731.387562][T20697] EXT4-fs (loop9): 1 truncate cleaned up [ 731.413392][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.418288][T20697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.445469][T20701] dummy0: left allmulticast mode [ 731.464883][T20701] dummy0: left promiscuous mode [ 731.565365][T20707] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 731.586342][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.641726][T20716] xt_ecn: cannot match TCP bits for non-tcp packets [ 731.655212][T20707] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 731.689324][T20720] blktrace: Concurrent blktraces are not allowed on loop0 [ 731.754441][T20724] x_tables: duplicate underflow at hook 2 [ 731.768781][T20707] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 731.869540][T20707] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 731.924381][T20733] netlink: 35284 bytes leftover after parsing attributes in process `syz.4.4861'. [ 731.942567][T16999] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 731.951381][T20733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4861'. [ 731.966830][T16999] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 731.997203][T16999] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 732.016624][T20739] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4863'. [ 732.027129][T20739] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4863'. [ 732.137003][T16999] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 732.172350][T20744] loop7: detected capacity change from 0 to 512 [ 732.200840][T20744] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4865: invalid indirect mapped block 256 (level 2) [ 732.217238][T20744] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 732.217885][T20744] EXT4-fs (loop7): 2 truncates cleaned up [ 732.232809][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 732.232832][ C1] EXT4-fs (loop7): initial error at time 1772782966: ext4_free_branches:1023: inode 11 [ 732.232863][ C1] EXT4-fs (loop7): last error at time 1772782966: ext4_free_branches:1023: inode 11 [ 732.260620][T20744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.312967][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.393415][T20761] loop9: detected capacity change from 0 to 512 [ 732.410868][T20761] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 732.427585][T20761] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.535117][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 732.536799][T20766] loop7: detected capacity change from 0 to 4096 [ 732.572717][T20766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.682560][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.733845][T20780] loop7: detected capacity change from 0 to 4096 [ 732.745898][T20780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.807576][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.817311][T20786] loop8: detected capacity change from 0 to 1024 [ 732.876067][T20795] xt_addrtype: ipv6 does not support BROADCAST matching [ 733.066036][T20809] loop0: detected capacity change from 0 to 4096 [ 733.092451][T20809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.139469][T14946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.192784][T20816] loop4: detected capacity change from 0 to 4096 [ 733.215629][T20816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.290798][T20823] __nla_validate_parse: 5 callbacks suppressed [ 733.290819][T20823] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4889'. [ 733.320634][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.385648][T20827] syzkaller0: entered promiscuous mode [ 733.391206][T20827] syzkaller0: entered allmulticast mode [ 733.416590][T20830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20830 comm=syz.4.4890 [ 733.696773][T20841] loop4: detected capacity change from 0 to 512 [ 733.723828][T20841] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 733.792945][T20841] EXT4-fs (loop4): 1 truncate cleaned up [ 733.803652][T20847] loop8: detected capacity change from 0 to 128 [ 733.803724][T20841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.829919][T20847] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 733.864934][T20847] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.017055][T20850] loop9: detected capacity change from 0 to 4096 [ 734.061654][T20850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.134709][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.248713][T20856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.359167][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.435467][T20867] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4904'. [ 734.541433][T20880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 734.570657][T20880] EXT4-fs: Ignoring removed oldalloc option [ 734.587022][T20880] EXT4-fs: Ignoring removed oldalloc option [ 734.593400][T20880] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 734.593978][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.617181][T20880] EXT4-fs: error: could not find journal device path [ 734.697358][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4909'. [ 734.732323][T16507] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 734.798147][T20886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.868312][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.999657][T20905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4918'. [ 735.710218][T20919] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 735.868547][T20919] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.969744][T20933] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 736.080369][T20933] EXT4-fs (loop9): Remounting filesystem read-only [ 736.087051][T20933] EXT4-fs (loop9): 1 truncate cleaned up [ 736.092749][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 736.092773][ C1] EXT4-fs (loop9): initial error at time 1772782970: ext4_mb_generate_buddy:1315 [ 736.092825][ C1] EXT4-fs (loop9): last error at time 1772782970: ext4_mb_generate_buddy:1315 [ 736.241963][T20933] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.298672][ T28] audit: type=1326 audit(1772782971.043:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20926 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bcecc799 code=0x7ffc0000 [ 736.388189][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.406207][ T28] audit: type=1326 audit(1772782971.063:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20926 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7ff0bcecc799 code=0x7ffc0000 [ 736.449963][ T28] audit: type=1326 audit(1772782971.063:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20926 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bcecc799 code=0x7ffc0000 [ 736.554327][ T28] audit: type=1326 audit(1772782971.073:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20926 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0bcecc799 code=0x7ffc0000 [ 736.629246][ T28] audit: type=1326 audit(1772782971.073:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20926 comm="syz.9.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bcecc799 code=0x7ffc0000 [ 736.784000][T11936] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 736.849385][T20944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.989401][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.021696][T20956] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4930'. [ 737.080848][ T28] audit: type=1400 audit(1772782971.813:5288): avc: denied { unmount } for pid=20175 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 737.129272][T20964] EXT4-fs: Ignoring removed nobh option [ 737.154723][T20964] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 737.168807][T20964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.418360][T20977] set_capacity_and_notify: 10 callbacks suppressed [ 737.418378][T20977] loop4: detected capacity change from 0 to 164 [ 737.539551][T20977] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 737.547800][T20977] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 737.559899][T20977] erspan1: entered promiscuous mode [ 737.645619][T20981] loop9: detected capacity change from 0 to 512 [ 737.880915][T20982] loop8: detected capacity change from 0 to 512 [ 738.060850][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.321553][T20986] loop4: detected capacity change from 0 to 4096 [ 738.445792][T20986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.578779][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.368437][T21014] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4943'. [ 739.389447][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4941'. [ 739.430129][T21020] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.4944'. [ 739.493558][ T28] audit: type=1400 audit(1772782974.233:5289): avc: denied { unmount } for pid=18674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 739.971311][T21051] loop7: detected capacity change from 0 to 512 [ 741.251081][T21064] loop4: detected capacity change from 0 to 512 [ 742.829320][T21068] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4952'. [ 743.106152][T21076] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4955'. [ 743.219996][T21077] loop4: detected capacity change from 0 to 512 [ 743.329604][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4957'. [ 743.379636][T21080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4957'. [ 743.479773][T21085] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 743.542700][T21087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21087 comm=syz.4.4960 [ 743.592848][T21085] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 743.824178][T21090] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4959'. [ 745.509402][T21112] loop7: detected capacity change from 0 to 128 [ 745.528429][T21112] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 745.547931][T21111] loop9: detected capacity change from 0 to 4096 [ 745.598955][T21111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.624578][T21105] IPv6: NLM_F_CREATE should be specified when creating new route [ 745.695986][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.035827][T21127] loop8: detected capacity change from 0 to 128 [ 746.730473][T21141] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4975'. [ 746.883088][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4978'. [ 747.004156][ T28] audit: type=1400 audit(1772782981.743:5290): avc: denied { read } for pid=21143 comm="syz.0.4978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 747.026256][T21144] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4978'. [ 747.144898][T21144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4978'. [ 747.154848][T21147] blktrace: Concurrent blktraces are not allowed on loop0 [ 747.373757][T21150] loop8: detected capacity change from 0 to 4096 [ 747.395217][T21152] loop0: detected capacity change from 0 to 4096 [ 747.429607][T21150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.471695][T21152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.563380][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.602361][T21152] EXT4-fs (loop0): shut down requested (1) [ 747.611742][T21152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 747.628008][T21152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 747.657726][ T28] audit: type=1400 audit(1772782982.393:5291): avc: denied { rmdir } for pid=21151 comm="syz.0.4981" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.690553][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4981'. [ 747.729536][T21152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 747.738519][T21152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 747.757674][ T28] audit: type=1400 audit(1772782982.493:5292): avc: denied { read write } for pid=21151 comm="syz.0.4981" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 747.784062][T21157] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 747.797834][T21152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 747.817032][T21157] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 747.834259][ T28] audit: type=1400 audit(1772782982.573:5293): avc: denied { open } for pid=21151 comm="syz.0.4981" path="/316/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 747.939212][T14946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.163806][T21164] x_tables: duplicate underflow at hook 2 [ 748.180689][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4986'. [ 748.237173][T21167] loop8: detected capacity change from 0 to 4096 [ 748.266140][T21167] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.275602][T21175] netlink: 'syz.7.4989': attribute type 32 has an invalid length. [ 748.342404][T21180] blktrace: Concurrent blktraces are not allowed on loop0 [ 748.358457][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.426600][T21183] loop7: detected capacity change from 0 to 4096 [ 748.529203][T21183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.571051][T21189] loop4: detected capacity change from 0 to 512 [ 748.633869][T21193] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4994'. [ 748.762341][T21201] loop4: detected capacity change from 0 to 256 [ 748.781722][T21202] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4998'. [ 748.814514][T21201] syz_tun: entered allmulticast mode [ 748.836464][T21202] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4998'. [ 749.073557][T21210] loop7: detected capacity change from 0 to 4096 [ 749.171768][T21200] syz_tun: left allmulticast mode [ 749.309517][T21217] x_tables: duplicate underflow at hook 2 [ 749.321773][T21219] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.341532][T21220] blktrace: Concurrent blktraces are not allowed on loop0 [ 749.413944][T21222] loop9: detected capacity change from 0 to 4096 [ 749.500377][T21219] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.595693][T21219] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.700290][T21219] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.770563][T19972] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.786469][T19972] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.806447][T19972] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.823923][T19972] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.052657][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5011'. [ 750.105099][T21240] FAULT_INJECTION: forcing a failure. [ 750.105099][T21240] name failslab, interval 1, probability 0, space 0, times 0 [ 750.117796][T21240] CPU: 0 UID: 0 PID: 21240 Comm: syz.8.5013 Tainted: G W syzkaller #0 PREEMPT(full) [ 750.117830][T21240] Tainted: [W]=WARN [ 750.117899][T21240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 750.117912][T21240] Call Trace: [ 750.117919][T21240] [ 750.117927][T21240] __dump_stack+0x1d/0x30 [ 750.117957][T21240] dump_stack_lvl+0x95/0xd0 [ 750.117980][T21240] dump_stack+0x15/0x1b [ 750.118060][T21240] should_fail_ex+0x263/0x280 [ 750.118085][T21240] should_failslab+0x8c/0xb0 [ 750.118107][T21240] kmem_cache_alloc_noprof+0x66/0x400 [ 750.118129][T21240] ? __inet_hash_connect+0xba2/0x1370 [ 750.118221][T21240] __inet_hash_connect+0xba2/0x1370 [ 750.118260][T21240] inet6_hash_connect+0xaf/0xc0 [ 750.118281][T21240] tcp_v6_connect+0xa32/0xcc0 [ 750.118421][T21240] ? avc_has_perm_noaudit+0xab/0x130 [ 750.118448][T21240] __inet_stream_connect+0x169/0x7f0 [ 750.118476][T21240] ? tcp_sendmsg_fastopen+0x172/0x520 [ 750.118569][T21240] ? should_failslab+0x8c/0xb0 [ 750.118590][T21240] ? __kmalloc_cache_noprof+0x18a/0x410 [ 750.118616][T21240] tcp_sendmsg_fastopen+0x43a/0x520 [ 750.118694][T21240] tcp_sendmsg_locked+0x2939/0x2de0 [ 750.118728][T21240] ? __rcu_read_unlock+0x4e/0x70 [ 750.118754][T21240] ? terminate_walk+0x1e6/0x210 [ 750.118781][T21240] ? path_openat+0x1ab2/0x2050 [ 750.118811][T21240] ? path_openat+0x1b01/0x2050 [ 750.118945][T21240] ? __rcu_read_unlock+0x4e/0x70 [ 750.118966][T21240] ? avc_has_perm_noaudit+0xab/0x130 [ 750.118993][T21240] ? avc_has_perm+0x101/0x190 [ 750.119089][T21240] ? _raw_spin_lock_bh+0x56/0xb0 [ 750.119115][T21240] ? __pfx_tcp_sendmsg+0x10/0x10 [ 750.119135][T21240] ? __pfx_inet6_sendmsg+0x10/0x10 [ 750.119243][T21240] tcp_sendmsg+0x2f/0x50 [ 750.119262][T21240] inet6_sendmsg+0x76/0xd0 [ 750.119293][T21240] __sys_sendto+0x325/0x490 [ 750.119326][T21240] __x64_sys_sendto+0x76/0x90 [ 750.119375][T21240] x64_sys_call+0x2d35/0x3020 [ 750.119401][T21240] do_syscall_64+0x12c/0x370 [ 750.119500][T21240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.119523][T21240] RIP: 0033:0x7fd596d6c799 [ 750.119540][T21240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.119579][T21240] RSP: 002b:00007fd5957bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 750.119601][T21240] RAX: ffffffffffffffda RBX: 00007fd596fe5fa0 RCX: 00007fd596d6c799 [ 750.119616][T21240] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 750.119629][T21240] RBP: 00007fd5957bf090 R08: 00002000000001c0 R09: 000000000000001c [ 750.119653][T21240] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000001 [ 750.119667][T21240] R13: 00007fd596fe6038 R14: 00007fd596fe5fa0 R15: 00007ffd5f9a92c8 [ 750.119750][T21240] [ 750.252635][T21249] loop8: detected capacity change from 0 to 4096 [ 750.431552][T21260] syzkaller0: entered promiscuous mode [ 750.557537][T21260] syzkaller0: entered allmulticast mode [ 751.020057][T21288] loop9: detected capacity change from 0 to 4096 [ 751.885082][T21325] loop4: detected capacity change from 0 to 512 [ 751.916522][T21324] x_tables: duplicate underflow at hook 2 [ 752.597223][T21328] loop7: detected capacity change from 0 to 4096 [ 752.749156][T21336] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 752.949601][T21343] __nla_validate_parse: 5 callbacks suppressed [ 752.949793][T21343] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5046'. [ 753.392077][T21352] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5048'. [ 753.487781][T11496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 753.633311][T21358] blktrace: Concurrent blktraces are not allowed on loop0 [ 754.964066][T21393] pimreg: entered allmulticast mode [ 754.974414][T21389] loop8: detected capacity change from 0 to 1764 [ 755.004065][T21399] pimreg: left allmulticast mode [ 755.035192][T21402] loop8: detected capacity change from 0 to 128 [ 755.051332][T21402] EXT4-fs mount: 11 callbacks suppressed [ 755.051351][T21402] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 755.074170][T21402] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.495949][T21413] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5068'. [ 756.152432][T16507] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 756.308502][T21426] xt_hashlimit: size too large, truncated to 1048576 [ 757.400167][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5080'. [ 757.422235][T21445] netlink: 'syz.4.5080': attribute type 30 has an invalid length. [ 757.455525][T16975] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.473153][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5080'. [ 757.485047][T16975] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.508544][T21447] loop9: detected capacity change from 0 to 1024 [ 757.521211][T21445] netlink: 'syz.4.5080': attribute type 30 has an invalid length. [ 757.529246][T16975] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.549213][T21447] EXT4-fs: inline encryption not supported [ 757.559522][T16975] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.634981][T21449] FAULT_INJECTION: forcing a failure. [ 757.634981][T21449] name failslab, interval 1, probability 0, space 0, times 0 [ 757.647807][T21449] CPU: 1 UID: 0 PID: 21449 Comm: syz.4.5082 Tainted: G W syzkaller #0 PREEMPT(full) [ 757.647841][T21449] Tainted: [W]=WARN [ 757.647849][T21449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.647879][T21449] Call Trace: [ 757.647887][T21449] [ 757.647897][T21449] __dump_stack+0x1d/0x30 [ 757.647928][T21449] dump_stack_lvl+0x95/0xd0 [ 757.647960][T21449] dump_stack+0x15/0x1b [ 757.647986][T21449] should_fail_ex+0x263/0x280 [ 757.648011][T21449] should_failslab+0x8c/0xb0 [ 757.648086][T21449] kmem_cache_alloc_noprof+0x66/0x400 [ 757.648113][T21449] ? sctp_get_port_local+0x438/0xae0 [ 757.648141][T21449] sctp_get_port_local+0x438/0xae0 [ 757.648169][T21449] sctp_do_bind+0x398/0x4b0 [ 757.648194][T21449] sctp_connect_new_asoc+0x153/0x3a0 [ 757.648217][T21449] sctp_sendmsg+0xfff/0x1d60 [ 757.648250][T21449] ? selinux_socket_sendmsg+0x192/0x1c0 [ 757.648287][T21449] ? __pfx_sctp_sendmsg+0x10/0x10 [ 757.648309][T21449] inet_sendmsg+0xc5/0xd0 [ 757.648334][T21449] ? __pfx_inet_sendmsg+0x10/0x10 [ 757.648376][T21449] ____sys_sendmsg+0x519/0x5b0 [ 757.648426][T21449] ___sys_sendmsg+0x195/0x1e0 [ 757.648455][T21449] ? path_openat+0x1b01/0x2050 [ 757.648578][T21449] __sys_sendmmsg+0x185/0x320 [ 757.648685][T21449] __x64_sys_sendmmsg+0x57/0x70 [ 757.648724][T21449] x64_sys_call+0x27aa/0x3020 [ 757.648752][T21449] do_syscall_64+0x12c/0x370 [ 757.648775][T21449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.648797][T21449] RIP: 0033:0x7ffb230bc799 [ 757.648815][T21449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.648837][T21449] RSP: 002b:00007ffb21b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 757.648859][T21449] RAX: ffffffffffffffda RBX: 00007ffb23335fa0 RCX: 00007ffb230bc799 [ 757.648913][T21449] RDX: 0000000000000001 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 757.648931][T21449] RBP: 00007ffb21b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 757.648946][T21449] R10: 00000000200400c0 R11: 0000000000000246 R12: 0000000000000001 [ 757.648962][T21449] R13: 00007ffb23336038 R14: 00007ffb23335fa0 R15: 00007ffedb488c38 [ 757.648982][T21449] [ 758.005471][T21447] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.791427][T21481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5090'. [ 759.306316][T21484] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5091'. [ 759.351181][T21484] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5091'. [ 759.440613][ T28] audit: type=1400 audit(1772783250.176:5294): avc: denied { mount } for pid=21487 comm="syz.8.5093" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 760.195910][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.301166][T21500] x_tables: duplicate underflow at hook 2 [ 760.798855][T21508] loop0: detected capacity change from 0 to 512 [ 760.881105][T21510] loop9: detected capacity change from 0 to 1764 [ 760.998766][T21514] x_tables: duplicate underflow at hook 2 [ 762.048383][T21526] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5105'. [ 762.301172][T18190] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 763.012587][T21540] x_tables: duplicate underflow at hook 2 [ 763.680167][T21564] blktrace: Concurrent blktraces are not allowed on loop0 [ 763.881593][T21571] loop4: detected capacity change from 0 to 512 [ 764.408982][T21581] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5124'. [ 764.442096][T21579] loop7: detected capacity change from 0 to 4096 [ 764.589007][T21584] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5125'. [ 764.625172][T21579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.710310][T21594] x_tables: duplicate underflow at hook 2 [ 764.739176][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.828613][T21597] loop8: detected capacity change from 0 to 4096 [ 764.850168][T21597] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.894474][T21604] blktrace: Concurrent blktraces are not allowed on loop0 [ 764.915425][T21601] loop7: detected capacity change from 0 to 4096 [ 765.018689][T21601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.129308][T21601] FAULT_INJECTION: forcing a failure. [ 765.129308][T21601] name failslab, interval 1, probability 0, space 0, times 0 [ 765.154579][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.157722][T21601] CPU: 1 UID: 0 PID: 21601 Comm: syz.7.5129 Tainted: G W syzkaller #0 PREEMPT(full) [ 765.157755][T21601] Tainted: [W]=WARN [ 765.157762][T21601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.157837][T21601] Call Trace: [ 765.157844][T21601] [ 765.157853][T21601] __dump_stack+0x1d/0x30 [ 765.157880][T21601] dump_stack_lvl+0x95/0xd0 [ 765.157904][T21601] dump_stack+0x15/0x1b [ 765.157925][T21601] should_fail_ex+0x263/0x280 [ 765.157986][T21601] should_failslab+0x8c/0xb0 [ 765.158008][T21601] __kmalloc_noprof+0xb8/0x4e0 [ 765.158031][T21601] ? iovec_from_user+0x84/0x200 [ 765.158060][T21601] iovec_from_user+0x84/0x200 [ 765.158161][T21601] __import_iovec+0xf3/0x530 [ 765.158190][T21601] import_iovec+0x60/0x80 [ 765.158233][T21601] vfs_writev+0xfb/0x900 [ 765.158265][T21601] __se_sys_pwritev2+0xfc/0x1c0 [ 765.158288][T21601] __x64_sys_pwritev2+0x67/0x80 [ 765.158310][T21601] x64_sys_call+0xe07/0x3020 [ 765.158356][T21601] do_syscall_64+0x12c/0x370 [ 765.158406][T21601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.158430][T21601] RIP: 0033:0x7fc65346c799 [ 765.158447][T21601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.158466][T21601] RSP: 002b:00007fc651ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 765.158488][T21601] RAX: ffffffffffffffda RBX: 00007fc6536e5fa0 RCX: 00007fc65346c799 [ 765.158503][T21601] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000004 [ 765.158541][T21601] RBP: 00007fc651ec7090 R08: 0000000000000000 R09: 0000000000000003 [ 765.158554][T21601] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 765.158568][T21601] R13: 00007fc6536e6038 R14: 00007fc6536e5fa0 R15: 00007ffce4587eb8 [ 765.158588][T21601] [ 765.389587][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.410038][T21618] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5136'. [ 765.504583][T21624] loop9: detected capacity change from 0 to 512 [ 765.523348][T21632] tipc: Started in network mode [ 765.556021][T21632] tipc: Node identity ac1414aa, cluster identity 4711 [ 765.570113][T21632] tipc: Enabled bearer , priority 10 [ 765.595484][T21632] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 765.699442][T21644] blktrace: Concurrent blktraces are not allowed on loop0 [ 765.767292][T21653] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5146'. [ 765.777179][T21653] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5146'. [ 765.795947][T21655] loop0: detected capacity change from 0 to 512 [ 765.819400][T21655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 765.839820][ T28] audit: type=1400 audit(1772783256.566:5295): avc: denied { listen } for pid=21650 comm="syz.7.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 765.860566][T21655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 765.873488][T21655] System zones: 1-2, 4-12, 8-8 [ 765.884653][T21655] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.5145: iget: bad i_size value: 38620345925642 [ 765.900293][T21655] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 765.915196][T21666] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5150'. [ 765.947658][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 765.954140][ C0] EXT4-fs (loop0): initial error at time 1772783256: ext4_orphan_get:1391: inode 15 [ 765.963590][ C0] EXT4-fs (loop0): last error at time 1772783256: ext4_orphan_get:1391: inode 15 [ 765.977615][T21655] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5145: couldn't read orphan inode 15 (err -117) [ 765.989951][T21655] loop0: lost filesystem error report for type 5 error -117 [ 765.992119][T21655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.033352][T21674] loop7: detected capacity change from 0 to 512 [ 766.079708][T21674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 766.092379][T21674] ext4 filesystem being mounted at /577/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.106241][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5152'. [ 766.115195][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5152'. [ 766.137896][T14946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.180368][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 766.213222][T21683] loop9: detected capacity change from 0 to 128 [ 766.250478][ T28] audit: type=1400 audit(1772783256.986:5296): avc: denied { validate_trans } for pid=21682 comm="syz.9.5157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 766.294460][T21694] netlink: 324 bytes leftover after parsing attributes in process `syz.7.5156'. [ 766.295343][T21693] blktrace: Concurrent blktraces are not allowed on loop0 [ 766.339401][T21697] loop7: detected capacity change from 0 to 512 [ 766.370418][T21697] EXT4-fs (loop7): 1 orphan inode deleted [ 766.376628][T21697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.390917][T21697] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.399542][T21704] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5162'. [ 766.402464][ T9459] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 766.420188][ T9459] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:33: Failed to release dquot type 1 [ 766.451836][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.519245][T21713] loop4: detected capacity change from 0 to 256 [ 766.529073][T21713] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 766.555168][T21713] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 766.669476][T14412] tipc: Node number set to 2886997162 [ 766.735857][T21719] loop9: detected capacity change from 0 to 512 [ 766.822847][T21729] syzkaller0: entered promiscuous mode [ 766.836889][T21729] syzkaller0: entered allmulticast mode [ 766.909061][T21737] vlan4: entered allmulticast mode [ 766.956835][T21739] loop4: detected capacity change from 0 to 1024 [ 766.970342][T21739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.006281][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.136325][T21750] x_tables: duplicate underflow at hook 2 [ 767.181804][T21749] loop4: detected capacity change from 0 to 512 [ 767.343472][T21743] loop8: detected capacity change from 0 to 1024 [ 767.429800][T21743] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 767.443631][T21743] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.457965][T21743] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.5175: Freeing blocks not in datazone - block = 0, count = 16 [ 767.996848][T19976] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 112: padding at end of block bitmap is not set [ 768.013585][T19976] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 768.023886][T21751] delete_channel: no stack [ 768.053842][T19976] EXT4-fs (loop8): This should not happen!! Data will be lost [ 768.053842][T19976] [ 768.064540][T21770] FAULT_INJECTION: forcing a failure. [ 768.064540][T21770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.074965][T19976] EXT4-fs (loop8): Total free blocks count 0 [ 768.087682][T19976] EXT4-fs (loop8): Free/Dirty block details [ 768.094180][T19976] EXT4-fs (loop8): free_blocks=16 [ 768.094323][T21770] CPU: 1 UID: 0 PID: 21770 Comm: syz.9.5185 Tainted: G W syzkaller #0 PREEMPT(full) [ 768.094357][T21770] Tainted: [W]=WARN [ 768.094364][T21770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.094419][T21770] Call Trace: [ 768.094426][T21770] [ 768.094435][T21770] __dump_stack+0x1d/0x30 [ 768.094462][T21770] dump_stack_lvl+0x95/0xd0 [ 768.094543][T21770] dump_stack+0x15/0x1b [ 768.094565][T21770] should_fail_ex+0x263/0x280 [ 768.094590][T21770] should_fail+0xb/0x20 [ 768.094626][T21770] should_fail_usercopy+0x1a/0x20 [ 768.094704][T21770] _copy_from_iter+0xcf/0xea0 [ 768.094765][T21770] ? kmem_cache_alloc_node_noprof+0x20a/0x460 [ 768.094790][T21770] ? __alloc_skb+0x362/0x690 [ 768.094814][T21770] ? __alloc_skb+0x4f6/0x690 [ 768.094911][T21770] pfkey_sendmsg+0x126/0x9b0 [ 768.095020][T21770] ? avc_has_perm+0x101/0x190 [ 768.095046][T21770] ? selinux_socket_sendmsg+0x192/0x1c0 [ 768.095139][T21770] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 768.095216][T21770] ____sys_sendmsg+0x563/0x5b0 [ 768.095247][T21770] ___sys_sendmsg+0x195/0x1e0 [ 768.095272][T21770] ? path_openat+0x1b01/0x2050 [ 768.095342][T21770] __sys_sendmmsg+0x185/0x320 [ 768.095379][T21770] __x64_sys_sendmmsg+0x57/0x70 [ 768.095448][T21770] x64_sys_call+0x27aa/0x3020 [ 768.095492][T21770] do_syscall_64+0x12c/0x370 [ 768.095514][T21770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.095593][T21770] RIP: 0033:0x7ff0bcecc799 [ 768.095610][T21770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.095658][T21770] RSP: 002b:00007ff0bb91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 768.095680][T21770] RAX: ffffffffffffffda RBX: 00007ff0bd145fa0 RCX: 00007ff0bcecc799 [ 768.095763][T21770] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 768.095779][T21770] RBP: 00007ff0bb91f090 R08: 0000000000000000 R09: 0000000000000000 [ 768.095792][T21770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.095807][T21770] R13: 00007ff0bd146038 R14: 00007ff0bd145fa0 R15: 00007ffcd571a648 [ 768.095827][T21770] [ 768.318704][T19976] EXT4-fs (loop8): dirty_blocks=16 [ 768.323981][T19976] EXT4-fs (loop8): Block reservation details [ 768.330993][T19976] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 768.349193][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 768.366789][ T28] audit: type=1326 audit(1772783259.096:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.9.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bcecc799 code=0x7ffc0000 [ 768.445824][T21784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21784 comm=syz.8.5184 [ 768.450627][ T28] audit: type=1326 audit(1772783259.096:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.9.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bcecc799 code=0x7ffc0000 [ 768.516830][ T28] audit: type=1326 audit(1772783259.096:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.9.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0bce8cfce code=0x7ffc0000 [ 768.546742][T21788] loop4: detected capacity change from 0 to 128 [ 768.572612][ T28] audit: type=1326 audit(1772783259.096:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.9.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff0bcecda97 code=0x7ffc0000 [ 768.599783][T21788] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 768.612401][T21788] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.628349][ T28] audit: type=1326 audit(1772783259.096:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.9.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0bcecc799 code=0x7ffc0000 [ 768.674036][ T28] audit: type=1326 audit(1772783259.096:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.9.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff0bcecda97 code=0x7ffc0000 [ 768.699030][ T28] audit: type=1326 audit(1772783259.096:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.9.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0bce8cfce code=0x7ffc0000 [ 768.961854][T21813] loop9: detected capacity change from 0 to 512 [ 769.020100][T21817] program syz.9.5200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.428584][T21827] __nla_validate_parse: 19 callbacks suppressed [ 769.428606][T21827] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5205'. [ 769.599501][T21840] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5208'. [ 769.693202][T20175] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.720467][T21846] FAULT_INJECTION: forcing a failure. [ 769.720467][T21846] name failslab, interval 1, probability 0, space 0, times 0 [ 769.738751][T21846] CPU: 0 UID: 0 PID: 21846 Comm: syz.8.5210 Tainted: G W syzkaller #0 PREEMPT(full) [ 769.738822][T21846] Tainted: [W]=WARN [ 769.738863][T21846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 769.738878][T21846] Call Trace: [ 769.738885][T21846] [ 769.738895][T21846] __dump_stack+0x1d/0x30 [ 769.738925][T21846] dump_stack_lvl+0x95/0xd0 [ 769.739044][T21846] dump_stack+0x15/0x1b [ 769.739064][T21846] should_fail_ex+0x263/0x280 [ 769.739088][T21846] should_failslab+0x8c/0xb0 [ 769.739114][T21846] __kmalloc_node_noprof+0xc8/0x560 [ 769.739187][T21846] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 769.739242][T21846] __vmalloc_node_range_noprof+0x428/0x12b0 [ 769.739280][T21846] ? selinux_file_open+0x2e6/0x330 [ 769.739311][T21846] ? do_replace+0x220/0x360 [ 769.739416][T21846] __vmalloc_noprof+0xa4/0xf0 [ 769.739465][T21846] ? do_replace+0x220/0x360 [ 769.739494][T21846] do_replace+0x220/0x360 [ 769.739536][T21846] do_ebt_set_ctl+0x12e/0xcd0 [ 769.739573][T21846] ? __rcu_read_unlock+0x4e/0x70 [ 769.739597][T21846] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 769.739644][T21846] ? ip4_datagram_release_cb+0x3ee/0x420 [ 769.739678][T21846] ? _raw_spin_unlock_bh+0x18/0x20 [ 769.739748][T21846] ? release_sock+0x116/0x150 [ 769.739851][T21846] ? sockopt_release_sock+0x41/0x50 [ 769.739920][T21846] ? do_ip_setsockopt+0x1af1/0x2290 [ 769.739950][T21846] nf_setsockopt+0x199/0x1b0 [ 769.739974][T21846] ip_setsockopt+0x102/0x110 [ 769.740000][T21846] sock_common_setsockopt+0x69/0x80 [ 769.740021][T21846] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 769.740125][T21846] __sys_setsockopt+0x184/0x200 [ 769.740160][T21846] __x64_sys_setsockopt+0x64/0x80 [ 769.740190][T21846] x64_sys_call+0x2327/0x3020 [ 769.740219][T21846] do_syscall_64+0x12c/0x370 [ 769.740243][T21846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.740341][T21846] RIP: 0033:0x7fd596d6c799 [ 769.740364][T21846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.740387][T21846] RSP: 002b:00007fd5957bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 769.740425][T21846] RAX: ffffffffffffffda RBX: 00007fd596fe5fa0 RCX: 00007fd596d6c799 [ 769.740439][T21846] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 769.740451][T21846] RBP: 00007fd5957bf090 R08: 0000000000000108 R09: 0000000000000000 [ 769.740467][T21846] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 769.740483][T21846] R13: 00007fd596fe6038 R14: 00007fd596fe5fa0 R15: 00007ffd5f9a92c8 [ 769.740569][T21846] [ 769.853295][T21846] syz.8.5210: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 770.027544][T21846] CPU: 1 UID: 0 PID: 21846 Comm: syz.8.5210 Tainted: G W syzkaller #0 PREEMPT(full) [ 770.027603][T21846] Tainted: [W]=WARN [ 770.027611][T21846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.027626][T21846] Call Trace: [ 770.027638][T21846] [ 770.027649][T21846] __dump_stack+0x1d/0x30 [ 770.027679][T21846] dump_stack_lvl+0x95/0xd0 [ 770.027783][T21846] dump_stack+0x15/0x1b [ 770.027806][T21846] warn_alloc+0x145/0x1c0 [ 770.027836][T21846] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 770.027939][T21846] ? selinux_file_open+0x2e6/0x330 [ 770.027967][T21846] ? do_replace+0x220/0x360 [ 770.028001][T21846] __vmalloc_noprof+0xa4/0xf0 [ 770.028101][T21846] ? do_replace+0x220/0x360 [ 770.028136][T21846] do_replace+0x220/0x360 [ 770.028222][T21846] do_ebt_set_ctl+0x12e/0xcd0 [ 770.028257][T21846] ? __rcu_read_unlock+0x4e/0x70 [ 770.028377][T21846] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 770.028473][T21846] ? ip4_datagram_release_cb+0x3ee/0x420 [ 770.028507][T21846] ? _raw_spin_unlock_bh+0x18/0x20 [ 770.028533][T21846] ? release_sock+0x116/0x150 [ 770.028630][T21846] ? sockopt_release_sock+0x41/0x50 [ 770.028688][T21846] ? do_ip_setsockopt+0x1af1/0x2290 [ 770.028711][T21846] nf_setsockopt+0x199/0x1b0 [ 770.028744][T21846] ip_setsockopt+0x102/0x110 [ 770.028767][T21846] sock_common_setsockopt+0x69/0x80 [ 770.028854][T21846] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 770.028918][T21846] __sys_setsockopt+0x184/0x200 [ 770.028946][T21846] __x64_sys_setsockopt+0x64/0x80 [ 770.029024][T21846] x64_sys_call+0x2327/0x3020 [ 770.029050][T21846] do_syscall_64+0x12c/0x370 [ 770.029074][T21846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.029099][T21846] RIP: 0033:0x7fd596d6c799 [ 770.029119][T21846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.029160][T21846] RSP: 002b:00007fd5957bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 770.029180][T21846] RAX: ffffffffffffffda RBX: 00007fd596fe5fa0 RCX: 00007fd596d6c799 [ 770.029195][T21846] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 770.029269][T21846] RBP: 00007fd5957bf090 R08: 0000000000000108 R09: 0000000000000000 [ 770.029281][T21846] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 770.029361][T21846] R13: 00007fd596fe6038 R14: 00007fd596fe5fa0 R15: 00007ffd5f9a92c8 [ 770.029384][T21846] [ 770.272508][T21846] Mem-Info: [ 770.275817][T21846] active_anon:77959 inactive_anon:8 isolated_anon:0 [ 770.275817][T21846] active_file:13659 inactive_file:16610 isolated_file:0 [ 770.275817][T21846] unevictable:0 dirty:197 writeback:0 [ 770.275817][T21846] slab_reclaimable:4157 slab_unreclaimable:22793 [ 770.275817][T21846] mapped:29849 shmem:68577 pagetables:5020 [ 770.275817][T21846] sec_pagetables:0 bounce:0 [ 770.275817][T21846] kernel_misc_reclaimable:0 [ 770.275817][T21846] free:1766918 free_pcp:29726 free_cma:0 [ 770.392312][T21846] Node 0 active_anon:311984kB inactive_anon:32kB active_file:54636kB inactive_file:66440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119396kB dirty:800kB writeback:0kB shmem:274308kB kernel_stack:4800kB pagetables:19984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 770.478366][T21846] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 770.510232][T21846] lowmem_reserve[]: 0 2879 7857 7857 [ 770.539917][T21846] Node 0 DMA32 free:2944656kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948180kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 770.572200][T21846] lowmem_reserve[]: 0 0 4978 4978 [ 770.577286][T21846] Node 0 Normal free:4109632kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:311752kB inactive_anon:32kB active_file:54636kB inactive_file:66440kB unevictable:0kB writepending:800kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:113064kB local_pcp:87932kB free_cma:0kB [ 770.581403][T21868] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 770.611306][T21846] lowmem_reserve[]: 0 0 0 0 [ 770.628233][T21846] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 770.641658][T21846] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 5*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944656kB [ 770.657969][T21846] Node 0 Normal: 1958*4kB (UM) 1547*8kB (UME) 4*16kB (UM) 214*32kB (UM) 326*64kB (UM) 219*128kB (UME) 148*256kB (UME) 162*512kB (UME) 119*1024kB (UM) 77*2048kB (UME) 887*4096kB (UM) = 4109552kB [ 770.669807][T21868] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.677997][T21846] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 770.699968][T21846] 98835 total pagecache pages [ 770.704685][T21846] 9 pages in swap cache [ 770.709471][T21846] Free swap = 124588kB [ 770.713635][T21846] Total swap = 124996kB [ 770.718203][T21846] 2097051 pages RAM [ 770.722275][T21846] 0 pages HighMem/MovableOnly [ 770.748271][T21846] 81606 pages reserved [ 770.782869][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5219'. [ 770.825840][T21881] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5220'. [ 770.942533][T21893] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 770.969660][T21893] __quota_error: 26 callbacks suppressed [ 770.969673][T21893] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 770.986926][T21893] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 770.996460][T21893] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.5226: Failed to acquire dquot type 1 [ 771.008640][T21893] loop8: lost filesystem error report for type 5 error -5 [ 771.010719][T21893] EXT4-fs (loop8): 1 truncate cleaned up [ 771.017930][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 771.017964][ C1] EXT4-fs (loop8): last error at time 1772783261: ext4_acquire_dquot:7001 [ 771.039832][T21893] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 771.062347][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 771.114469][T21904] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5229'. [ 771.174095][T21910] x_tables: duplicate underflow at hook 2 [ 771.298894][T21915] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5233'. [ 771.347408][T21917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5234'. [ 771.383783][T21921] x_tables: duplicate underflow at hook 2 [ 771.390449][T14946] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 771.721152][T21932] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 771.736731][T21932] SELinux: failed to load policy [ 771.837973][T21941] blktrace: Concurrent blktraces are not allowed on loop0 [ 771.981302][T21949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5246'. [ 772.015895][T21948] set_capacity_and_notify: 2 callbacks suppressed [ 772.015914][T21948] loop9: detected capacity change from 0 to 4096 [ 772.082317][T21952] loop0: detected capacity change from 0 to 2048 [ 772.207296][T21952] Alternate GPT is invalid, using primary GPT. [ 772.220030][T21952] loop0: p1 p2 p3 [ 772.236112][T21948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.426307][T16407] udevd[16407]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 772.458137][T18704] udevd[18704]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 772.478295][T21957] blktrace: Concurrent blktraces are not allowed on sg0 [ 772.486895][ T28] audit: type=1326 audit(1772783263.216:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.0.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 772.532074][T16567] udevd[16567]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 772.543258][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.563270][ T28] audit: type=1326 audit(1772783263.256:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.0.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 772.641466][ T28] audit: type=1326 audit(1772783263.256:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.0.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 772.678855][T21961] loop4: detected capacity change from 0 to 512 [ 772.716106][T21964] x_tables: duplicate underflow at hook 2 [ 772.746560][ T28] audit: type=1326 audit(1772783263.256:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.0.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 772.750129][T21967] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 772.811530][ T28] audit: type=1326 audit(1772783263.256:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.0.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 772.863324][ T28] audit: type=1326 audit(1772783263.256:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.0.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 772.922930][ T28] audit: type=1326 audit(1772783263.256:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.0.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 772.977544][ T28] audit: type=1326 audit(1772783263.256:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.0.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 773.038692][T21980] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5258'. [ 773.082059][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5259'. [ 773.370061][T21993] loop8: detected capacity change from 0 to 512 [ 773.452066][T21997] Cannot find del_set index 29 as target [ 773.994650][T22007] loop9: detected capacity change from 0 to 512 [ 774.072751][T22007] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 774.177347][T22007] EXT4-fs (loop9): mount failed [ 774.446577][T22019] loop8: detected capacity change from 0 to 512 [ 776.099704][T22025] Invalid ELF header magic: != ELF [ 776.258546][T22032] __nla_validate_parse: 4 callbacks suppressed [ 776.258566][T22032] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5278'. [ 776.358614][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5278'. [ 776.412836][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5278'. [ 776.457836][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5278'. [ 776.510336][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5278'. [ 776.639732][T22042] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5282'. [ 777.273314][T22064] loop0: detected capacity change from 0 to 128 [ 777.304775][T22064] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 777.369470][T22064] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.419009][T22068] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5290'. [ 777.571499][T22074] random: crng reseeded on system resumption [ 777.905203][T22077] loop7: detected capacity change from 0 to 1024 [ 777.927397][T22077] EXT4-fs: Ignoring removed bh option [ 778.002767][T22077] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.132549][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 778.132569][ T28] audit: type=1326 audit(1772783268.866:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22076 comm="syz.7.5292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc65346c799 code=0x0 [ 778.176270][T14946] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 778.298593][T22090] netlink: 'syz.4.5294': attribute type 32 has an invalid length. [ 778.356407][T11936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.907068][T22113] x_tables: duplicate underflow at hook 2 [ 779.036670][T22122] loop4: detected capacity change from 0 to 128 [ 779.131245][T22122] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 779.166664][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5308'. [ 779.192594][T22122] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.256001][T22133] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5310'. [ 779.509290][T22144] netlink: 'syz.0.5314': attribute type 2 has an invalid length. [ 779.519585][T22144] netlink: 191880 bytes leftover after parsing attributes in process `syz.0.5314'. [ 779.655522][T22157] loop0: detected capacity change from 0 to 128 [ 779.892420][T20175] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 779.948924][T22171] usb usb8: usbfs: process 22171 (syz.7.5326) did not claim interface 0 before use [ 780.124355][T22180] loop7: detected capacity change from 0 to 128 [ 780.131272][T22180] EXT4-fs: Ignoring removed nobh option [ 780.142581][T22180] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 780.156104][T22180] ext4 filesystem being mounted at /598/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 780.220155][T22186] x_tables: duplicate underflow at hook 2 [ 780.256443][ T28] audit: type=1400 audit(1772783270.976:5354): avc: denied { execute } for pid=22178 comm="syz.7.5329" path="/598/mnt/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 780.290984][T22187] loop4: detected capacity change from 0 to 512 [ 780.299556][T22187] EXT4-fs (loop4): 1 truncate cleaned up [ 780.306268][T22187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.365583][T11936] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.646436][T15135] syz_tun (unregistering): left allmulticast mode [ 780.821651][T22203] chnl_net:caif_netlink_parms(): no params data found [ 780.866945][T22203] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.874180][T22203] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.881559][T22203] bridge_slave_0: entered allmulticast mode [ 780.889229][T22203] bridge_slave_0: entered promiscuous mode [ 780.896434][T22203] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.906170][T22203] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.913551][T22203] bridge_slave_1: entered allmulticast mode [ 780.921414][T22203] bridge_slave_1: entered promiscuous mode [ 780.940429][T22203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.951659][T22203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.972783][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.973761][T22203] team0: Port device team_slave_0 added [ 780.989443][T22203] team0: Port device team_slave_1 added [ 781.018973][T22203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.027771][T22203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.080369][T22203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.193512][T22203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.200669][T22203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.227559][T22203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.254939][T16975] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 781.390165][T22234] __nla_validate_parse: 2 callbacks suppressed [ 781.390190][T22234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5338'. [ 781.446889][T22203] hsr_slave_0: entered promiscuous mode [ 781.675487][T22203] hsr_slave_1: entered promiscuous mode [ 781.715091][T22203] debugfs: 'hsr0' already exists in 'hsr' [ 781.755277][T22203] Cannot create hsr debugfs directory [ 781.876164][T16975] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 782.981504][T22252] loop8: detected capacity change from 0 to 4096 [ 782.999366][T22259] x_tables: duplicate underflow at hook 2 [ 783.008705][T16975] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 783.059148][T22252] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.085038][T16975] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 783.133311][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.321371][T16975] bridge_slave_1: left allmulticast mode [ 783.337016][T16975] bridge_slave_1: left promiscuous mode [ 783.404679][T22277] loop8: detected capacity change from 0 to 512 [ 784.305116][T16975] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.314923][T16975] bridge_slave_0: left promiscuous mode [ 784.321353][T16975] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.367161][ T28] audit: type=1400 audit(1772783275.096:5355): avc: denied { ioctl } for pid=22283 comm="syz.0.5356" path="socket:[73976]" dev="sockfs" ino=73976 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 785.219931][T16975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.229326][T16975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.238423][T16975] bond0 (unregistering): Released all slaves [ 785.311600][T16975] tipc: Disabling bearer [ 785.328836][T16975] tipc: Left network mode [ 785.350478][T16975] IPVS: stopping backup sync thread 17982 ... [ 785.374761][T16975] hsr_slave_0: left promiscuous mode [ 785.389942][T16975] hsr_slave_1: left promiscuous mode [ 785.406291][T16975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.420609][T16975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.421728][T22313] x_tables: duplicate underflow at hook 2 [ 785.482089][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5364'. [ 785.531287][T16975] team0 (unregistering): Port device team_slave_1 removed [ 785.541716][T16975] team0 (unregistering): Port device team_slave_0 removed [ 785.580005][T22321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.592837][T22321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.878616][T22341] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5368'. [ 786.639980][T22344] loop8: detected capacity change from 0 to 256 [ 787.018309][T22203] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 787.065669][T22203] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 787.085294][T22203] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 787.874514][T22346] loop4: detected capacity change from 0 to 164 [ 788.059014][T22203] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 788.625756][T22354] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5371'. [ 788.712998][T22344] FAT-fs (loop8): Directory bread(block 64) failed [ 788.720310][T22344] FAT-fs (loop8): Directory bread(block 65) failed [ 788.726898][T22344] FAT-fs (loop8): Directory bread(block 66) failed [ 788.733458][T22344] FAT-fs (loop8): Directory bread(block 67) failed [ 788.740016][T22344] FAT-fs (loop8): Directory bread(block 68) failed [ 788.746572][T22344] FAT-fs (loop8): Directory bread(block 69) failed [ 788.753723][T22344] FAT-fs (loop8): Directory bread(block 70) failed [ 788.760326][T22344] FAT-fs (loop8): Directory bread(block 71) failed [ 788.766869][T22344] FAT-fs (loop8): Directory bread(block 72) failed [ 788.773508][T22344] FAT-fs (loop8): Directory bread(block 73) failed [ 788.850644][T22362] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 788.971949][T22203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.998020][T22203] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.030283][T22203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 789.078494][T22203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 789.089312][T22372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=22372 comm=syz.4.5375 [ 789.111021][T22382] loop8: detected capacity change from 0 to 2048 [ 789.122723][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.129820][T16999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.175257][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.182383][T16999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.196719][T22382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.197277][T22388] loop4: detected capacity change from 0 to 512 [ 789.253642][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.270614][T22388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.280217][T22203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.328872][T22388] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 789.448831][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.487516][T22412] loop9: detected capacity change from 0 to 4096 [ 789.500054][T22416] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5384'. [ 789.676410][T22412] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.843511][T22203] veth0_vlan: entered promiscuous mode [ 789.874349][T22426] blktrace: Concurrent blktraces are not allowed on loop0 [ 789.918289][ T28] audit: type=1326 audit(1772783280.566:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.8.5385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd596d6c799 code=0x0 [ 789.943940][T22203] veth1_vlan: entered promiscuous mode [ 790.086975][T22203] veth0_macvtap: entered promiscuous mode [ 790.133794][T22429] loop4: detected capacity change from 0 to 512 [ 790.149158][T22203] veth1_macvtap: entered promiscuous mode [ 790.249406][T22429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 790.273689][T22203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.288999][T22429] ext4 filesystem being mounted at /137/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.303019][T22203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.333658][T16983] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.352009][T16983] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.391256][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.401294][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5386'. [ 790.410302][T16983] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.422635][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5386'. [ 790.435129][T16975] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.492156][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 790.779362][T22444] loop8: detected capacity change from 0 to 128 [ 790.786009][T22444] vfat: Unknown parameter '18446744073709551615' [ 790.857763][T22448] dummy0: entered promiscuous mode [ 790.872040][T22448] macsec1: entered allmulticast mode [ 790.882862][T22448] dummy0: entered allmulticast mode [ 790.998821][T22448] dummy0: left allmulticast mode [ 791.025637][T22448] dummy0: left promiscuous mode [ 791.223647][T22453] loop7: detected capacity change from 0 to 128 [ 791.264848][T22458] x_tables: duplicate underflow at hook 2 [ 791.289154][T22453] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 791.319545][T22453] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.393828][T22463] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5394'. [ 791.459706][ T28] audit: type=1326 audit(1772783282.196:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22464 comm="syz.9.5395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0bcecc799 code=0x0 [ 791.465283][T22453] tipc: Enabling of bearer rejected, failed to enable media [ 791.558432][T22468] blktrace: Concurrent blktraces are not allowed on loop0 [ 791.890161][T22203] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 791.996492][T22490] loop7: detected capacity change from 0 to 256 [ 792.177579][T22491] sctp: [Deprecated]: syz.0.5393 (pid 22491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 792.177579][T22491] Use struct sctp_sack_info instead [ 792.277126][T22498] x_tables: duplicate underflow at hook 2 [ 792.413412][T22505] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5407'. [ 792.542303][T22514] loop9: detected capacity change from 0 to 512 [ 792.635179][T22511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5409'. [ 792.760483][T22490] FAT-fs (loop7): Directory bread(block 64) failed [ 792.837110][T22511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.950993][T22511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.076612][T22518] loop4: detected capacity change from 0 to 128 [ 793.090607][T22511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.134764][T22518] msdos: Bad value for 'uid' [ 793.148780][T22490] FAT-fs (loop7): Directory bread(block 65) failed [ 793.331509][T22511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.358729][T22490] FAT-fs (loop7): Directory bread(block 66) failed [ 793.365610][T22518] msdos: Bad value for 'uid' [ 793.376471][T22490] FAT-fs (loop7): Directory bread(block 67) failed [ 794.169443][T22522] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5413'. [ 794.317435][T22490] FAT-fs (loop7): Directory bread(block 68) failed [ 794.723159][T22490] FAT-fs (loop7): Directory bread(block 69) failed [ 794.830870][T22490] FAT-fs (loop7): Directory bread(block 70) failed [ 794.915665][T22490] FAT-fs (loop7): Directory bread(block 71) failed [ 794.962755][T22490] FAT-fs (loop7): Directory bread(block 72) failed [ 794.979087][T22490] FAT-fs (loop7): Directory bread(block 73) failed [ 795.785085][T22543] blktrace: Concurrent blktraces are not allowed on loop0 [ 795.802725][T22545] SET target dimension over the limit! [ 795.873483][T22548] loop9: detected capacity change from 0 to 512 [ 795.877574][T22553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22553 comm=syz.7.5422 [ 795.902654][T22548] EXT4-fs: Ignoring removed oldalloc option [ 795.953093][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5421'. [ 795.992788][T22548] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5420: invalid indirect mapped block 4294967295 (level 1) [ 796.071853][T22548] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 796.090489][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 796.107548][ C1] EXT4-fs (loop9): initial error at time 1772783286: ext4_free_branches:1023: inode 11 [ 796.117982][T22548] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5420: invalid indirect mapped block 4294967295 (level 1) [ 796.118063][T22548] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 796.118364][T22548] EXT4-fs (loop9): 2 truncates cleaned up [ 796.118917][T22548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.161826][ C1] EXT4-fs (loop9): last error at time 1772783286: ext4_free_branches:1023: inode 11 [ 796.174697][T22578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5428'. [ 796.185005][T22578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5428'. [ 796.228898][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.277223][T22582] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.327961][T22585] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5429'. [ 796.380201][T22585] loop9: detected capacity change from 0 to 164 [ 796.423136][T22585] ISOFS: unable to read i-node block [ 796.428619][T22585] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 796.440357][T22582] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.555387][T22597] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5435'. [ 796.558419][T22582] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.761852][T22582] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.836252][T19976] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.852172][T22607] loop7: detected capacity change from 0 to 512 [ 796.880772][T22607] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 796.900454][ T9469] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.917720][ T9469] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.945666][T22614] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5441'. [ 796.965423][ T9469] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.979933][ T28] audit: type=1400 audit(1772783287.716:5358): avc: denied { write } for pid=22604 comm="syz.7.5438" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.007276][ T28] audit: type=1400 audit(1772783287.746:5359): avc: denied { open } for pid=22604 comm="syz.7.5438" path="/5/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.032044][ T28] audit: type=1326 audit(1772783287.746:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22615 comm="syz.0.5442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1e4d8c799 code=0x0 [ 797.099266][T22203] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 797.114251][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5445'. [ 797.227221][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5448'. [ 797.287175][T22648] x_tables: duplicate underflow at hook 2 [ 797.316245][T22652] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5454'. [ 797.387319][T22650] SELinux: failed to load policy [ 797.409956][T22664] loop7: detected capacity change from 0 to 2048 [ 797.459603][T16567] Alternate GPT is invalid, using primary GPT. [ 797.466510][T22668] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_rx_wq": -EINTR [ 797.467477][T16567] loop7: p1 p2 p3 [ 797.489686][T22664] Alternate GPT is invalid, using primary GPT. [ 797.501493][T22664] loop7: p1 p2 p3 [ 797.689118][T22718] x_tables: duplicate underflow at hook 2 [ 797.692748][T16567] udevd[16567]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 797.706846][T16407] udevd[16407]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 797.718756][T16404] udevd[16404]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 797.785304][T22720] geneve2: entered promiscuous mode [ 797.812728][T22720] loop8: detected capacity change from 0 to 1024 [ 797.820393][T22720] EXT4-fs: inline encryption not supported [ 797.827741][ T9469] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.837296][ T9469] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.872793][T22720] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.930009][ T9469] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 798.072041][ T9469] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 798.578232][T22715] FAULT_INJECTION: forcing a failure. [ 798.578232][T22715] name failslab, interval 1, probability 0, space 0, times 0 [ 798.590890][T22715] CPU: 0 UID: 0 PID: 22715 Comm: syz.9.5466 Tainted: G W syzkaller #0 PREEMPT(full) [ 798.590947][T22715] Tainted: [W]=WARN [ 798.590955][T22715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.590982][T22715] Call Trace: [ 798.590989][T22715] [ 798.590998][T22715] __dump_stack+0x1d/0x30 [ 798.591023][T22715] dump_stack_lvl+0x95/0xd0 [ 798.591097][T22715] dump_stack+0x15/0x1b [ 798.591117][T22715] should_fail_ex+0x263/0x280 [ 798.591184][T22715] should_failslab+0x8c/0xb0 [ 798.591271][T22715] kmem_cache_alloc_noprof+0x66/0x400 [ 798.591292][T22715] ? __send_signal_locked+0x154/0x780 [ 798.591323][T22715] __send_signal_locked+0x154/0x780 [ 798.591361][T22715] send_signal_locked+0x34c/0x3c0 [ 798.591389][T22715] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 798.591413][T22715] do_send_sig_info+0x9f/0xf0 [ 798.591448][T22715] __se_sys_tkill+0x163/0x1c0 [ 798.591475][T22715] __x64_sys_tkill+0x31/0x40 [ 798.591566][T22715] x64_sys_call+0x642/0x3020 [ 798.591597][T22715] do_syscall_64+0x12c/0x370 [ 798.591625][T22715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.591702][T22715] RIP: 0033:0x7ff0bcecc799 [ 798.591722][T22715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.591743][T22715] RSP: 002b:00007ff0bb91f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 798.591767][T22715] RAX: ffffffffffffffda RBX: 00007ff0bd145fa0 RCX: 00007ff0bcecc799 [ 798.591782][T22715] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000000288 [ 798.591858][T22715] RBP: 00007ff0bb91f090 R08: 0000000000000000 R09: 0000000000000000 [ 798.591871][T22715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.591882][T22715] R13: 00007ff0bd146038 R14: 00007ff0bd145fa0 R15: 00007ffcd571a648 [ 798.591908][T22715] [ 798.948803][T16567] udevd[16567]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 799.002198][T16404] udevd[16404]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 799.048721][T16407] udevd[16407]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 799.058790][ T28] audit: type=1400 audit(1772783289.756:5361): avc: denied { ioctl } for pid=22729 comm="syz.4.5471" path="socket:[75370]" dev="sockfs" ino=75370 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 799.142919][T22738] netlink: 'syz.0.5473': attribute type 10 has an invalid length. [ 799.209446][T22741] bond_slave_0: entered promiscuous mode [ 799.215177][T22741] bond_slave_1: entered promiscuous mode [ 799.241573][T22741] macvtap1: entered promiscuous mode [ 799.251606][T22741] bond0: entered promiscuous mode [ 799.262041][T22741] macvtap1: entered allmulticast mode [ 799.278391][T22741] bond0: entered allmulticast mode [ 799.313506][T22741] bond_slave_0: entered allmulticast mode [ 799.335830][T22741] bond_slave_1: entered allmulticast mode [ 799.365565][T22741] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 799.381428][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.390790][T22741] bond0: left allmulticast mode [ 799.395886][T22748] __nla_validate_parse: 3 callbacks suppressed [ 799.395902][T22748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5476'. [ 799.398889][T22741] bond_slave_0: left allmulticast mode [ 799.425031][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5475'. [ 799.428684][T22741] bond_slave_1: left allmulticast mode [ 799.465310][T22741] bond0: left promiscuous mode [ 799.470901][T22755] Cannot find set identified by id 0 to match [ 799.472929][T22741] bond_slave_0: left promiscuous mode [ 799.482432][T22741] bond_slave_1: left promiscuous mode [ 799.514661][T22738] dummy0: entered promiscuous mode [ 799.516475][T22759] x_tables: duplicate underflow at hook 2 [ 799.521348][T22738] dummy0: entered allmulticast mode [ 799.533771][T22738] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 799.653512][T22777] netlink: 460 bytes leftover after parsing attributes in process `syz.9.5485'. [ 799.720037][T22783] loop4: detected capacity change from 0 to 512 [ 799.876395][T22788] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5491'. [ 799.886646][T22783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.903453][T22788] loop8: detected capacity change from 0 to 164 [ 800.047615][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5493'. [ 800.108534][T22783] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 800.386359][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.562457][T22815] x_tables: duplicate underflow at hook 2 [ 800.910325][ T28] audit: type=1400 audit(1772783291.646:5362): avc: denied { write } for pid=22840 comm="syz.7.5505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 800.974944][T22841] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 801.029278][T22846] batman_adv: batadv0: Adding interface: vlan3 [ 801.057746][T22846] batman_adv: batadv0: The MTU of interface vlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.112638][T22855] netlink: 'syz.9.5508': attribute type 32 has an invalid length. [ 801.127682][T22846] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 801.173560][ T28] audit: type=1326 audit(1772783291.906:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22857 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 801.207768][ T28] audit: type=1326 audit(1772783291.906:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22857 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 801.233935][T22862] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5511'. [ 801.243117][T22862] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5511'. [ 801.257050][ T28] audit: type=1326 audit(1772783291.906:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22857 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 801.266898][T22865] loop9: detected capacity change from 0 to 512 [ 801.325697][T22873] x_tables: duplicate underflow at hook 2 [ 801.467217][ T28] audit: type=1326 audit(1772783291.906:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22857 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 801.515044][T22884] loop9: detected capacity change from 0 to 1024 [ 801.576949][T22884] EXT4-fs: Ignoring removed orlov option [ 801.613174][T22884] EXT4-fs: Ignoring removed nobh option [ 801.639473][ T28] audit: type=1326 audit(1772783291.906:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22857 comm="syz.0.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 801.672331][T22890] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5521'. [ 801.686810][T22884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.723275][T22893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5521'. [ 801.733986][T22893] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5521'. [ 801.918032][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.928465][T22900] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 805.101133][T22930] x_tables: duplicate underflow at hook 2 [ 805.307986][T22935] loop9: detected capacity change from 0 to 512 [ 806.650870][T22942] loop7: detected capacity change from 0 to 512 [ 807.818726][T22946] netlink: 'syz.8.5531': attribute type 15 has an invalid length. [ 808.150820][T22950] loop9: detected capacity change from 0 to 512 [ 809.694109][T22956] loop4: detected capacity change from 0 to 4096 [ 809.712619][T22956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.098794][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.138103][T22968] x_tables: duplicate underflow at hook 2 [ 810.149352][T22964] 9p: Could not find request transport: *d>{fdo=0x0000000000000007 [ 810.248235][T22979] loop4: detected capacity change from 0 to 512 [ 810.325240][T22979] EXT4-fs (loop4): blocks per group (4) and clusters per group (8192) inconsistent [ 810.587970][T22964] IPVS: set_ctl: invalid protocol: 55 224.0.0.2:20004 [ 810.638783][T22985] __nla_validate_parse: 2 callbacks suppressed [ 810.638803][T22985] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5545'. [ 812.921929][T22995] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5546'. [ 813.090623][T23012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=23012 comm=syz.4.5553 [ 813.133320][T23017] FAULT_INJECTION: forcing a failure. [ 813.133320][T23017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.173003][T23017] CPU: 0 UID: 0 PID: 23017 Comm: syz.8.5556 Tainted: G W syzkaller #0 PREEMPT(full) [ 813.173040][T23017] Tainted: [W]=WARN [ 813.173089][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.173104][T23017] Call Trace: [ 813.173112][T23017] [ 813.173121][T23017] __dump_stack+0x1d/0x30 [ 813.173151][T23017] dump_stack_lvl+0x95/0xd0 [ 813.173178][T23017] dump_stack+0x15/0x1b [ 813.173241][T23017] should_fail_ex+0x263/0x280 [ 813.173266][T23017] should_fail+0xb/0x20 [ 813.173290][T23017] should_fail_usercopy+0x1a/0x20 [ 813.173339][T23017] _copy_to_user+0x20/0xa0 [ 813.173368][T23017] simple_read_from_buffer+0xb5/0x130 [ 813.173396][T23017] proc_fail_nth_read+0x10e/0x150 [ 813.173449][T23017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.173513][T23017] vfs_read+0x1ab/0x7f0 [ 813.173549][T23017] ? __rcu_read_unlock+0x4e/0x70 [ 813.173573][T23017] ? __fget_files+0x184/0x1c0 [ 813.173601][T23017] ? mutex_lock+0x57/0x90 [ 813.173649][T23017] ksys_read+0xdc/0x1a0 [ 813.173690][T23017] __x64_sys_read+0x40/0x50 [ 813.173749][T23017] x64_sys_call+0x2886/0x3020 [ 813.173780][T23017] do_syscall_64+0x12c/0x370 [ 813.173803][T23017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.173826][T23017] RIP: 0033:0x7fd596d2cfce [ 813.173844][T23017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 813.173925][T23017] RSP: 002b:00007fd5957befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.173951][T23017] RAX: ffffffffffffffda RBX: 00007fd5957bf6c0 RCX: 00007fd596d2cfce [ 813.173968][T23017] RDX: 000000000000000f RSI: 00007fd5957bf0a0 RDI: 0000000000000005 [ 813.173983][T23017] RBP: 00007fd5957bf090 R08: 0000000000000000 R09: 0000000000000000 [ 813.173999][T23017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.174015][T23017] R13: 00007fd596fe6038 R14: 00007fd596fe5fa0 R15: 00007ffd5f9a92c8 [ 813.174110][T23017] [ 813.412631][T23023] FAULT_INJECTION: forcing a failure. [ 813.412631][T23023] name failslab, interval 1, probability 0, space 0, times 0 [ 813.425545][T23023] CPU: 0 UID: 0 PID: 23023 Comm: syz.4.5557 Tainted: G W syzkaller #0 PREEMPT(full) [ 813.425575][T23023] Tainted: [W]=WARN [ 813.425581][T23023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.425593][T23023] Call Trace: [ 813.425600][T23023] [ 813.425608][T23023] __dump_stack+0x1d/0x30 [ 813.425636][T23023] dump_stack_lvl+0x95/0xd0 [ 813.425668][T23023] dump_stack+0x15/0x1b [ 813.425693][T23023] should_fail_ex+0x263/0x280 [ 813.425724][T23023] ? sctp_association_new+0x71/0x1190 [ 813.425744][T23023] should_failslab+0x8c/0xb0 [ 813.425787][T23023] __kmalloc_cache_noprof+0x5f/0x410 [ 813.425814][T23023] sctp_association_new+0x71/0x1190 [ 813.425840][T23023] ? __ipv6_addr_type+0xee/0x210 [ 813.425867][T23023] sctp_connect_new_asoc+0x1a8/0x3a0 [ 813.426016][T23023] sctp_sendmsg+0xfff/0x1d60 [ 813.426036][T23023] ? selinux_socket_sendmsg+0x192/0x1c0 [ 813.426074][T23023] ? __pfx_sctp_sendmsg+0x10/0x10 [ 813.426171][T23023] inet_sendmsg+0xc5/0xd0 [ 813.426196][T23023] ? __pfx_inet_sendmsg+0x10/0x10 [ 813.426222][T23023] ____sys_sendmsg+0x519/0x5b0 [ 813.426263][T23023] ___sys_sendmsg+0x195/0x1e0 [ 813.426292][T23023] ? path_openat+0x1b01/0x2050 [ 813.426413][T23023] __sys_sendmmsg+0x185/0x320 [ 813.426493][T23023] __x64_sys_sendmmsg+0x57/0x70 [ 813.426524][T23023] x64_sys_call+0x27aa/0x3020 [ 813.426554][T23023] do_syscall_64+0x12c/0x370 [ 813.426580][T23023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.426637][T23023] RIP: 0033:0x7ffb230bc799 [ 813.426655][T23023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.426674][T23023] RSP: 002b:00007ffb21b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 813.426694][T23023] RAX: ffffffffffffffda RBX: 00007ffb23335fa0 RCX: 00007ffb230bc799 [ 813.426714][T23023] RDX: 0000000000000001 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 813.426729][T23023] RBP: 00007ffb21b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 813.426762][T23023] R10: 00000000200400c0 R11: 0000000000000246 R12: 0000000000000001 [ 813.426778][T23023] R13: 00007ffb23336038 R14: 00007ffb23335fa0 R15: 00007ffedb488c38 [ 813.426800][T23023] [ 813.706825][T23029] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5560'. [ 813.716404][T23029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5560'. [ 813.743337][T23029] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5560'. [ 814.047880][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 814.047897][ T28] audit: type=1400 audit(1772783304.736:5415): avc: denied { setattr } for pid=23049 comm="syz.0.5567" name="NETLINK" dev="sockfs" ino=76561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 814.081814][T23053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5567'. [ 814.089937][T23057] loop7: detected capacity change from 0 to 128 [ 814.104073][T23057] msdos: Bad value for 'uid' [ 814.175001][T23057] msdos: Bad value for 'uid' [ 814.396200][T23062] loop4: detected capacity change from 0 to 1024 [ 814.549187][T23059] loop7: detected capacity change from 0 to 1024 [ 814.578565][T23062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.646607][T23059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 814.677248][T23059] System zones: 0-1, 3-36 [ 814.677763][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.723073][T23059] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.5569: bad orphan inode 134217728 [ 814.734754][T23059] loop7: lost filesystem error report for type 5 error -117 [ 814.737635][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 814.751383][ C1] EXT4-fs (loop7): initial error at time 1772783561: ext4_orphan_get:1417 [ 814.759979][ C1] EXT4-fs (loop7): last error at time 1772783561: ext4_orphan_get:1417 [ 814.783021][T23059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.831261][T23085] lo: entered allmulticast mode [ 815.186812][T23100] loop8: detected capacity change from 0 to 256 [ 815.555550][T23099] loop4: detected capacity change from 0 to 1024 [ 815.664047][T23100] FAT-fs (loop8): Directory bread(block 64) failed [ 815.670663][T23100] FAT-fs (loop8): Directory bread(block 65) failed [ 815.677371][T23100] FAT-fs (loop8): Directory bread(block 66) failed [ 815.684631][T23100] FAT-fs (loop8): Directory bread(block 67) failed [ 815.691569][T23100] FAT-fs (loop8): Directory bread(block 68) failed [ 815.698193][T23100] FAT-fs (loop8): Directory bread(block 69) failed [ 815.704874][T23100] FAT-fs (loop8): Directory bread(block 70) failed [ 815.712053][T23100] FAT-fs (loop8): Directory bread(block 71) failed [ 815.718690][T23100] FAT-fs (loop8): Directory bread(block 72) failed [ 815.725296][T23100] FAT-fs (loop8): Directory bread(block 73) failed [ 816.278766][T23099] EXT4-fs: Ignoring removed orlov option [ 816.331624][T23100] bridge_slave_0: left allmulticast mode [ 816.337380][T23100] bridge_slave_0: left promiscuous mode [ 816.344096][T23100] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.382584][T23100] bridge_slave_1: left allmulticast mode [ 816.388441][T23100] bridge_slave_1: left promiscuous mode [ 816.394187][T23100] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.447951][T23100] bond0: (slave bond_slave_0): Releasing backup interface [ 816.464877][T23100] bond0: (slave bond_slave_1): Releasing backup interface [ 816.513586][T23100] team0: Port device team_slave_0 removed [ 816.526879][T23100] team0: Port device team_slave_1 removed [ 816.536663][T23100] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 816.593544][T23099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.608985][T22203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.795046][T23099] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 816.981191][T23107] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 817.092070][T23107] bond1 (unregistering): Released all slaves [ 817.212843][T19976] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.314179][T19976] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.456942][T23107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.492496][T23118] loop7: detected capacity change from 0 to 128 [ 817.661281][T23107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.671721][T19976] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.035406][T23122] loop9: detected capacity change from 0 to 512 [ 818.455486][T23118] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 818.489988][T23118] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.699216][T19976] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.864451][T19976] bridge_slave_1: left allmulticast mode [ 818.893870][T19976] bridge_slave_1: left promiscuous mode [ 818.919359][T19976] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.952076][T19976] bridge_slave_0: left promiscuous mode [ 818.968579][T19976] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.151432][T19976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.161771][T23143] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5590'. [ 819.212140][T19976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.245909][T19976] bond0 (unregistering): Released all slaves [ 819.273668][T19976] bond1 (unregistering): (slave veth5): Releasing active interface [ 819.295381][T19976] bond1 (unregistering): Released all slaves [ 819.418443][T19976] tipc: Disabling bearer [ 819.469444][T22203] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 819.505955][T19976] tipc: Left network mode [ 819.602458][T23161] loop8: detected capacity change from 0 to 512 [ 819.610964][T23161] EXT4-fs: Ignoring removed nobh option [ 819.611222][T19976] hsr_slave_0: left promiscuous mode [ 819.628852][T20175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.637589][T23167] delete_channel: no stack [ 819.644215][T19976] hsr_slave_1: left promiscuous mode [ 819.651422][T19976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.652064][T23168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5595'. [ 819.676117][ T28] audit: type=1400 audit(2000000004.860:5416): avc: denied { bind } for pid=23166 comm="syz.7.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 819.687875][T23161] EXT4-fs (loop8): 1 orphan inode deleted [ 819.702119][T19976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.711290][T23161] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.755473][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5598'. [ 819.761033][T23180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5599'. [ 819.843433][T16507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.875275][T19976] team0 (unregistering): Port device team_slave_1 removed [ 819.879019][T23189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.898882][T19976] team0 (unregistering): Port device team_slave_0 removed [ 819.972466][T23189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.442782][T23201] loop9: detected capacity change from 0 to 512 [ 821.234051][T23208] loop4: detected capacity change from 0 to 1024 [ 821.251478][T23211] netlink: 324 bytes leftover after parsing attributes in process `syz.7.5607'. [ 821.284382][T23215] netlink: 'syz.8.5609': attribute type 10 has an invalid length. [ 821.301513][T23208] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 821.347423][T23208] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 821.366058][T23215] veth0_vlan: left promiscuous mode [ 821.392885][T23221] loop8: detected capacity change from 0 to 128 [ 821.410066][T23208] EXT4-fs (loop4): invalid journal inode [ 821.415752][T23208] EXT4-fs (loop4): can't get journal size [ 821.432043][T23215] veth0_vlan: entered promiscuous mode [ 821.449595][T23221] vfat: Unknown parameter '' [ 821.471691][T23208] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 821.496347][T23215] team0: Device veth0_vlan failed to register rx_handler [ 821.507750][T23208] EXT4-fs (loop4): mount failed [ 821.535674][T19976] IPVS: stop unused estimator thread 0... [ 821.723746][T23242] netlink: 35284 bytes leftover after parsing attributes in process `syz.7.5616'. [ 822.258489][T23245] loop8: detected capacity change from 0 to 512 [ 822.293503][T23242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5616'. [ 822.586867][T23256] FAULT_INJECTION: forcing a failure. [ 822.586867][T23256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.602942][T23257] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5617'. [ 822.624267][T23257] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5617'. [ 822.636655][T23256] CPU: 1 UID: 0 PID: 23256 Comm: syz.7.5619 Tainted: G W syzkaller #0 PREEMPT(full) [ 822.636726][T23256] Tainted: [W]=WARN [ 822.636735][T23256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.636750][T23256] Call Trace: [ 822.636758][T23256] [ 822.636766][T23256] __dump_stack+0x1d/0x30 [ 822.636794][T23256] dump_stack_lvl+0x95/0xd0 [ 822.636822][T23256] dump_stack+0x15/0x1b [ 822.636855][T23256] should_fail_ex+0x263/0x280 [ 822.636878][T23256] should_fail+0xb/0x20 [ 822.636897][T23256] should_fail_usercopy+0x1a/0x20 [ 822.637005][T23256] _copy_from_user+0x1c/0xb0 [ 822.637030][T23256] ___sys_sendmsg+0xc1/0x1e0 [ 822.637075][T23256] __x64_sys_sendmsg+0xd4/0x160 [ 822.637111][T23256] x64_sys_call+0x194c/0x3020 [ 822.637215][T23256] do_syscall_64+0x12c/0x370 [ 822.637240][T23256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.637264][T23256] RIP: 0033:0x7f2f5243c799 [ 822.637280][T23256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.637301][T23256] RSP: 002b:00007f2f50e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.637406][T23256] RAX: ffffffffffffffda RBX: 00007f2f526b5fa0 RCX: 00007f2f5243c799 [ 822.637423][T23256] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 822.637437][T23256] RBP: 00007f2f50e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 822.637449][T23256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.637461][T23256] R13: 00007f2f526b6038 R14: 00007f2f526b5fa0 R15: 00007fff86dc52f8 [ 822.637479][T23256] [ 823.300202][T23286] loop4: detected capacity change from 0 to 2048 [ 823.442234][T23290] blktrace: Concurrent blktraces are not allowed on loop0 [ 823.471218][T16567] Alternate GPT is invalid, using primary GPT. [ 823.477807][T16567] loop4: p2 p3 p7 [ 823.566140][T23295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5623'. [ 823.602405][T23297] loop9: detected capacity change from 0 to 512 [ 823.626185][T23297] EXT4-fs: inline encryption not supported [ 823.697843][T23297] EXT4-fs: Ignoring removed i_version option [ 823.711439][T23286] Alternate GPT is invalid, using primary GPT. [ 823.746723][T23286] loop4: p2 p3 p7 [ 823.795627][T23297] EXT4-fs (loop9): 1 orphan inode deleted [ 823.802167][T23297] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.874510][T23297] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.5626: Directory hole found for htree leaf block 0 [ 824.147795][T23297] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 824.211552][T23315] loop4: detected capacity change from 0 to 512 [ 824.240010][T18674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.362534][T23325] tipc: Started in network mode [ 824.367472][T23325] tipc: Node identity 0ac42701cc44, cluster identity 4711 [ 824.385042][T23325] tipc: Enabled bearer , priority 0 [ 824.452461][T23325] syzkaller0: entered promiscuous mode [ 824.467904][T23325] syzkaller0: entered allmulticast mode [ 824.484282][T23325] tipc: Resetting bearer [ 824.502064][T23324] tipc: Resetting bearer [ 824.526076][T23331] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5637'. [ 824.541418][T23324] tipc: Disabling bearer [ 824.546201][T23311] loop7: detected capacity change from 0 to 32768 [ 824.588860][T16567] loop7: p1 p3 < p5 p6 > [ 824.597807][T16567] loop7: partition table partially beyond EOD, truncated [ 824.710984][T23311] loop7: p1 p3 < p5 p6 > [ 824.730586][T23311] loop7: partition table partially beyond EOD, truncated [ 824.819356][T23342] loop9: detected capacity change from 0 to 512 [ 825.674479][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5649'. [ 825.776114][T18704] udevd[18704]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 825.776386][T16404] udevd[16404]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 825.798539][T16407] udevd[16407]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 825.809950][T16567] udevd[16567]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 826.016336][T23375] loop7: detected capacity change from 0 to 2048 [ 826.063157][T23375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.094670][T23375] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.148372][T23384] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 826.183428][T23384] EXT4-fs (loop7): Remounting filesystem read-only [ 826.206198][T23389] EXT4-fs (loop7): ext4_do_writepages: jbd2_start: 9223372036854775791 pages, ino 15; err -30 [ 826.501832][T16567] udevd[16567]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 826.513873][T16404] udevd[16404]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 826.525033][T16407] udevd[16407]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 826.575423][T18704] udevd[18704]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 826.669396][T22203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.691081][T23397] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5655'. [ 827.132062][ T28] audit: type=1107 audit(2000000012.280:5417): pid=23399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 827.300256][ T28] audit: type=1400 audit(2000000012.310:5418): avc: denied { setopt } for pid=23399 comm="syz.0.5659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 827.385114][T23408] SELinux: policydb magic number 0x240 does not match expected magic number 0xf97cff8c [ 827.453200][ T28] audit: type=1400 audit(2000000012.340:5419): avc: denied { accept } for pid=23399 comm="syz.0.5659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 827.474311][T23408] SELinux: failed to load policy [ 827.547510][ T28] audit: type=1326 audit(2000000012.560:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23410 comm="syz.0.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 827.708733][ T28] audit: type=1326 audit(2000000012.560:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23410 comm="syz.0.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 827.864234][ T28] audit: type=1326 audit(2000000012.570:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23410 comm="syz.0.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 828.016080][ T28] audit: type=1326 audit(2000000012.570:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23410 comm="syz.0.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 828.164009][ T28] audit: type=1326 audit(2000000012.570:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23410 comm="syz.0.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 828.313746][ T28] audit: type=1326 audit(2000000012.570:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23410 comm="syz.0.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 828.386045][ T28] audit: type=1326 audit(2000000012.570:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23410 comm="syz.0.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e4d8c799 code=0x7ffc0000 [ 828.823100][T23429] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 828.829652][T23429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 828.846855][T23429] vhci_hcd vhci_hcd.0: Device attached [ 828.908352][T23430] vhci_hcd: connection closed [ 828.914603][T19976] vhci_hcd vhci_hcd.8: stop threads [ 828.958686][T19976] vhci_hcd vhci_hcd.8: release socket [ 828.983510][T19976] vhci_hcd vhci_hcd.8: disconnect device [ 828.994448][T23441] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 829.049600][ T3386] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 829.062395][T14412] IPVS: starting estimator thread 0... [ 829.170544][T23431] IPVS: using max 2112 ests per chain, 105600 per kthread [ 829.238322][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5673'. [ 829.273550][T23454] bond_slave_0: entered promiscuous mode [ 829.279323][T23454] bond_slave_1: entered promiscuous mode [ 829.286626][T23454] macvtap1: entered promiscuous mode [ 829.292436][T23454] bond0: entered promiscuous mode [ 829.297843][T23454] macvtap1: entered allmulticast mode [ 829.303382][T23454] bond0: entered allmulticast mode [ 829.308587][T23454] bond_slave_0: entered allmulticast mode [ 829.314428][T23454] bond_slave_1: entered allmulticast mode [ 829.321851][T23454] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 829.330376][T23454] bond0: left allmulticast mode [ 829.335323][T23454] bond_slave_0: left allmulticast mode [ 829.340887][T23454] bond_slave_1: left allmulticast mode [ 829.346597][T23454] bond0: left promiscuous mode [ 829.352512][T23454] bond_slave_0: left promiscuous mode [ 829.357972][T23454] bond_slave_1: left promiscuous mode [ 829.494449][T23462] blktrace: Concurrent blktraces are not allowed on loop0 [ 829.805169][T23492] loop7: detected capacity change from 0 to 1024 [ 829.817246][T23492] EXT4-fs: Ignoring removed oldalloc option [ 829.825113][T23492] EXT4-fs: Ignoring removed bh option [ 829.850849][T23492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.005477][T23502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5692'. [ 830.025826][T23502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5692'. [ 830.035706][T23502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5692'. [ 830.157116][T23514] netlink: 'syz.0.5697': attribute type 32 has an invalid length. [ 830.406488][T23498] ================================================================== [ 830.414611][T23498] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 830.422634][T23498] [ 830.424980][T23498] write to 0xffff88811ad2940c of 4 bytes by task 23492 on cpu 1: [ 830.432711][T23498] xas_set_mark+0x12b/0x140 [ 830.437242][T23498] tag_pages_for_writeback+0xe3/0x2e0 [ 830.442671][T23498] ext4_do_writepages+0x6b9/0x2840 [ 830.447817][T23498] ext4_writepages+0x18f/0x320 [ 830.452597][T23498] do_writepages+0x1c6/0x310 [ 830.457222][T23498] file_write_and_wait_range+0x178/0x2f0 [ 830.462873][T23498] generic_buffers_fsync_noflush+0x45/0x130 [ 830.468788][T23498] ext4_sync_file+0x1aa/0x6b0 [ 830.473483][T23498] vfs_fsync_range+0xc5/0xe0 [ 830.477306][T23492] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.5691: Allocating blocks 1-17 which overlap fs metadata [ 830.478091][T23498] ext4_buffered_write_iter+0x34f/0x3c0 [ 830.478116][T23498] ext4_file_write_iter+0x380/0xfa0 [ 830.478137][T23498] iter_file_splice_write+0x6c4/0xa80 [ 830.507751][T23498] direct_splice_actor+0x156/0x2a0 [ 830.512865][T23498] splice_direct_to_actor+0x311/0x670 [ 830.518237][T23498] do_splice_direct+0x119/0x1a0 [ 830.523105][T23498] do_sendfile+0x382/0x650 [ 830.527527][T23498] __x64_sys_sendfile64+0x105/0x150 [ 830.532731][T23498] x64_sys_call+0x2dc4/0x3020 [ 830.537407][T23498] do_syscall_64+0x12c/0x370 [ 830.541986][T23498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.547878][T23498] [ 830.550211][T23498] read to 0xffff88811ad2940c of 4 bytes by task 23498 on cpu 0: [ 830.557830][T23498] file_write_and_wait_range+0x130/0x2f0 [ 830.563460][T23498] generic_buffers_fsync_noflush+0x45/0x130 [ 830.569370][T23498] ext4_sync_file+0x1aa/0x6b0 [ 830.574043][T23498] vfs_fsync_range+0xc5/0xe0 [ 830.578627][T23498] ext4_buffered_write_iter+0x34f/0x3c0 [ 830.584162][T23498] ext4_file_write_iter+0x380/0xfa0 [ 830.589372][T23498] iter_file_splice_write+0x6c4/0xa80 [ 830.594736][T23498] direct_splice_actor+0x156/0x2a0 [ 830.599837][T23498] splice_direct_to_actor+0x311/0x670 [ 830.605206][T23498] do_splice_direct+0x119/0x1a0 [ 830.610056][T23498] do_sendfile+0x382/0x650 [ 830.614478][T23498] __x64_sys_sendfile64+0x105/0x150 [ 830.619678][T23498] x64_sys_call+0x2dc4/0x3020 [ 830.624358][T23498] do_syscall_64+0x12c/0x370 [ 830.628968][T23498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.634865][T23498] [ 830.637188][T23498] value changed: 0x02000021 -> 0x04000021 [ 830.642902][T23498] [ 830.645224][T23498] Reported by Kernel Concurrency Sanitizer on: [ 830.651385][T23498] CPU: 0 UID: 0 PID: 23498 Comm: syz.7.5691 Tainted: G W syzkaller #0 PREEMPT(full) [ 830.662326][T23498] Tainted: [W]=WARN [ 830.666125][T23498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.676177][T23498] ================================================================== [ 830.713207][T22203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.