last executing test programs: 1m6.073741192s ago: executing program 32 (id=99): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0xe}, {0x3, 0xffff}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x5, 0x29, 0x80, 0x9, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x8000}}, @TCA_NETEM_LOSS={0x40, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x14, 0xb65, 0x5, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x200, 0x9, 0x14d}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0xc, 0x80000001, 0xffff13d9}}]}]}}}]}, 0xac}}, 0x0) poll(&(0x7f0000000000)=[{r2, 0x800}, {r0, 0x2008}, {r1, 0x204}], 0x3, 0xbd) shutdown(r0, 0x0) 1m1.993246131s ago: executing program 33 (id=163): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x28, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r0}, 0x20) (async) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r3, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@loopback, r5}, 0x14) (async) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ftruncate(r8, 0x8) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)) r9 = dup2(r0, r0) (async) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="04000000bc0a0000010000000400000080ca0200", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/20, @ANYRES32, @ANYBLOB="000000801d10d1d0f07f5c74487bd7cce2785c70f3269f2b06d3f58a188057a17b71ccd3ef5c653fb2f832b399a60200bfb58e0ab576c3fa7eaafd24762499344361ec63df70f6c1f70b401145594a58d9b2c5797cec448ab806f1e6516125fe0cb69929cac1b16ff3e9ff18680b3eae5436a095cbbac807000000d5bc9c6745cf21f6ecd415c30e3611615165924c4568bf072f"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x22, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x7, 0x4e, &(0x7f0000000640)=""/78, 0x41000, 0x48, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x7, 0x7, 0x882}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000800)=[r7, r8, r9, 0xffffffffffffffff, r10, r0], &(0x7f0000000840)=[{0x5, 0x5, 0x2}, {0x0, 0x4, 0x7, 0x9}, {0x4, 0x4, 0x4, 0xb}, {0x3, 0x3, 0xf, 0x2}, {0x3, 0x4, 0x7, 0x3}], 0x10, 0xc71}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="05"], 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8402) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) (async) r12 = socket(0x2a, 0x801, 0x0) getsockopt(r12, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 43.790370887s ago: executing program 6 (id=508): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xc81, 0x400, 0x43a1bd77, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x20c031, 0xffffffffffffffff, 0xec776000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="213a1824e9e121dca2e1d3da7f15f3fe", 0x10) 43.644510095s ago: executing program 6 (id=511): openat$ptp0(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x0, 0x1}, {0x4}}, {{0x3, 0x1, 0x1, 0x1}, {0x3}}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1}}], 0x38) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002801400030077"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) syz_emit_ethernet(0xc6, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020800451000b80064000009119078ac1414bbffffffff94040100862a0000000304128e6fa2ee2411ff84d8b7ee219e5e26b402128c27c000000000000000000000000000860f7f887cc44ff912573c000000000000001b224e2300649078010300008da720c60a831c375de957f18e04a2712bd1e177e405efc0fdc326bcfdce6cfa9395c4a3e142038cb398509b1d485abea7126da45ecc27a55899d209ec69543080ad150af386ffd79c33ec4304b4820e1e1feb07e8e841a7"], 0x0) (async) syz_emit_ethernet(0xc6, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020800451000b80064000009119078ac1414bbffffffff94040100862a0000000304128e6fa2ee2411ff84d8b7ee219e5e26b402128c27c000000000000000000000000000860f7f887cc44ff912573c000000000000001b224e2300649078010300008da720c60a831c375de957f18e04a2712bd1e177e405efc0fdc326bcfdce6cfa9395c4a3e142038cb398509b1d485abea7126da45ecc27a55899d209ec69543080ad150af386ffd79c33ec4304b4820e1e1feb07e8e841a7"], 0x0) 43.21424811s ago: executing program 6 (id=519): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) shutdown(r1, 0x1) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0'}, 0x29) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'veth0_virt_wifi\x00', &(0x7f00000006c0)=@ethtool_gstrings={0x1b, 0x5}}) 42.943464466s ago: executing program 6 (id=523): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) unshare(0x2a020400) bind$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x1, 0x2}, 0xc) getsockname$qrtr(r0, 0x0, &(0x7f00000000c0)) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) flock(0xffffffffffffffff, 0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) r3 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}, {&(0x7f0000000100)="6e6f82e5e8bf21ed4e1a02367f8b3cf61b4a16a146dfb1851626bda845094856f52489d817e92e5a8ecce42c451dca7457a66c467e", 0x35}]}, 0x2, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000402) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 42.53303842s ago: executing program 6 (id=531): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/108, 0x6c, 0x0, &(0x7f0000000080)=""/108, 0x6c}, &(0x7f0000000140)=0x40) 42.19833666s ago: executing program 6 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4211]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) r2 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "daf1bf98f947c57c30545220f7ee0c43"}) chdir(&(0x7f0000000140)='./file0\x00') syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424"], 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471e, &(0x7f0000000040), 0x2, 0x46b, &(0x7f0000000580)="$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") listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000e00)={0x17c04, r5, 0x299f25fd, 0x100000008, 0x400, 0x1}) 42.157847282s ago: executing program 34 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4211]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) r2 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "daf1bf98f947c57c30545220f7ee0c43"}) chdir(&(0x7f0000000140)='./file0\x00') syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424"], 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471e, &(0x7f0000000040), 0x2, 0x46b, &(0x7f0000000580)="$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") listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000e00)={0x17c04, r5, 0x299f25fd, 0x100000008, 0x400, 0x1}) 38.426366851s ago: executing program 0 (id=611): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x7, 0x9, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x700, 0x9, 0x10d7}}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 38.349151515s ago: executing program 0 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r1, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)=""/40, 0x28}], 0x2}, 0x5}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x20000000) 37.945687829s ago: executing program 0 (id=617): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x208000, &(0x7f0000000980)={[{@resuid}, {}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 37.543578192s ago: executing program 0 (id=622): flock(0xffffffffffffffff, 0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x0, 0x4bf, &(0x7f0000000540)="$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") syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000380)="84e8ba", 0x3}], 0x2) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000402) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 37.202336272s ago: executing program 0 (id=627): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r1) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x33d100) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0xfffffffffffffe6b, 0x6, 0x100000001, 0x1}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L-', 0x7}, 0x16, 0x3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x89, @remote, 0x4e23, 0x3, 'sed\x00', 0x8, 0xffff3320, 0x26}, 0x2c) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'osx.', 'devices.deny\x00'}) bind$phonet(0xffffffffffffffff, &(0x7f0000000280)={0x23, 0x2, 0xf3, 0x24}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x800, 0x10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0x0) statx(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x100, 0x100, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000a40)=[0x0, 0xee01, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00]) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000a80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000bc0)=0xe8) r12 = getpgid(0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c00)=0x0) r14 = getgid() r15 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000c40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000d80)=0xe8) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x16, 0x13, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x27e9}, [@generic={0x4, 0x9, 0x3, 0x2, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000001540)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001580)=""/4096, 0x40e00, 0x41, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000025c0)={0x2, 0x10, 0x7, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000002600)=[0x1, r2, 0xffffffffffffffff], &(0x7f0000002640)=[{0x2, 0x5, 0x6, 0x4}, {0x2, 0x4, 0x0, 0xe}, {0x0, 0x5, 0x7, 0x4}, {0x3, 0x3, 0x7}, {0x0, 0x5, 0x7, 0x5}, {0x5, 0x4, 0xe, 0xb}, {0x2, 0x5, 0xe, 0x2}, {0x4, 0x1, 0x6, 0x3}, {0x3, 0x3, 0xd, 0x4}], 0x10, 0xc}, 0x94) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000002c40)=@base={0x5, 0x5, 0x4, 0x1, 0xc40, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r21 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000002cc0), &(0x7f0000002d40)=0x60, 0x0) r22 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002d80), 0x400000) sendmmsg$unix(r1, &(0x7f0000003b40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000340)="c0a46ff727d3c924589921e4ab0c44fb1adeef897d7b3717d3ef4c75d6c9c2db88a52b90e612bd71a82c7243a7c43da81fc05ab844f4dcec99a9c5770da82b111df4818fc9015db03b7326846e05421add1b2f774bab752a83ff8f73865d1c97ee08392103aa417750660f837ebcce5ffcb7b7feb4863712ccf570e662f4f646f423954f5e03db2c5c01d8c42f22cb01818fcd3cb389028e5500d5ecc21dff57df72f3262f576e09ac0c9f64a107cbf94be9b3839aaebb8e4728e9521ea5d54b537bc4483731c1a56f98ad2aa6ee41ec5536016616acbf88fe8a778c3ff79ec8", 0xe0}, {&(0x7f0000000440)="3ba6ef12fdde8352c13d449511c7f16f9959e36ad56aa1d9023af37666f679100af23c9ca3933f2e5df4a3ca6015ef6375f2292e393ff33bde1f784e1c40b4b23f31e7689950ea09bb7d23b0bf59dbc7593373d595de631415fa19e9088e50782eed68501feb269dc4", 0x69}, {&(0x7f00000004c0)="517cb23c5d47c564a0586111ccd8ed51d9b5cb09878ab2e0f2b2bb5ced35eff07f3430788d246e3ae7fe88d6e1333b2c314485b53ec603cc100adc6c0a9876621ac14cb77ce09b8b341509734ef5a7cec688caa5782037dcbfa8dac75cca3777d4125b622eaf380a3cb8f58234c9e052be81a861ca99384a97d837436aeca002679f7258ec40a0193322d6d44218f7ed414917c1e722030c55052dc65b24a6857c3f1c66d867118b49296b22efb7e97c9467100e6dc1565c181879866a66ad03cb3b1b427caf43a26daacc751626b76e38fac8ffc822bc76502eb69d92db", 0xde}, {&(0x7f00000005c0)="40f0b60cda018d070c9fbf9f19d469951ee0e685dd7aefd8cf5a10a9cfc80e1ec388e96272787b729af6be73ae56679ef5eba9643010e9bd3a7945bcd91ce96bb8a4548602c1cab4e1fe3132b6f8ca782560c15f9fe2dfe21471cb7da570e34bf19f3dfa32a2f065b9cf5379b3c487800f43db807d3e4cc7a73c8de25337c2abe2b741f023966160be374d4eb9e6ce66dd4c7c65d8f1b05aa2c87900f098404f7638a71550d14b168c49", 0xaa}], 0x4, &(0x7f0000000e80)=[@rights={{0x18, 0x1, 0x1, [r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x30, 0x1, 0x1, [r3, r0, r15, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x118, 0x48010}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000fc0)="6920da51411f417cc6dc27df7b6a86b1b1", 0x11}, {&(0x7f0000001000)="835804af78df4e0833b945d27a1ad676bd87fc7368b95d89d283bffcd6033a72986f", 0x22}, {&(0x7f0000001040)="1956d2558ea5ae3dfa84cd40a4ddf55dd24aca425468300befdcb0d1332f9f191e6d75e283b810ca1bcb72418d6db969124c4ddc7b07228c6358b57884b4f4ed1faff64f1d1f67bb", 0x48}, {&(0x7f00000010c0)="a91009819c244673087ba4420dec1fc32fe09f43f91e0d8a9dc86ede8d387b66b40b0dada3", 0x25}, {&(0x7f0000001100)="f0cb8e56d65c3db63ae37e95b49ca6d9ee31e497b79c17f535fe2b7da208f92ccc9a2b092fce8b57dcc1e73ed80581dffff30c617a0530a65375aae38c25bb29798b8173e5909e76b26989bd8cf3a770459bc828c267d53d17b87c6aa26a9ea523fef2f858698453ffb208", 0x6b}, {&(0x7f0000001180)="d243e4e30d4a20ad73a497649c798a1e212b92aed5844c24473472aa8767", 0x1e}, {&(0x7f00000011c0)="5a6d8169f083637d7bdbe0bf1bc7f175a26f9bbdaa45118c606c4f", 0x1b}, {&(0x7f0000001200)="2627fde2ba0ae5bf6450783e307d57508f76d2aa0abce23035fe51e1ade9885754ccfba343332b76781d4c88edfc733a16a6758ddf97920325f23d872cd2e50df3b844749a91a875598d420911be446bb227735a42d9e5567976470ab89321c8be960ca89a3191ed2d36df8b4cbc2d782d4653150afb686ce313850e51e181709b5cb0498e98d44d727f2eaa5812cabd804f128b329d8d9af095a552a05ae41fa95c9fea698492", 0xa7}, {&(0x7f00000012c0)="9044ed7b5deb65f140148edd2c98a14c021d7dcd3b4628d756ea36a18bc2f855296ec756123b5eb8e256d78dfb275291c4bd199be71b2b1f89afa0a432df2ca7dba3f8e1b03eac163340cdc5b532185eb812a24128eec804389b10ac26ca1f63ce7faecc85c9ce06a267686bbb2a4d86d3d042dff6369f97aa8bf0dc36fd06acbcd9dd205142b5dd9f7f633f092fb1eab6bc4a3a448c91e9fc03338dd48c88f332e165212fb857befa98dcca9c98520a5e7538b1d863d92709f61253a40121ebb8d47771fd33150b7287b0bcbef545e2ae633f41a94c272496713572b68c7e09bd9518d37da5b60e642ceed0a5c06c36ae", 0xf1}], 0x9, &(0x7f00000027c0)=[@rights={{0x24, 0x1, 0x1, [r3, r2, r0, r19, r3]}}], 0x28, 0x4000001}}, {{&(0x7f0000002800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002880)="9f8f13f5c40be421c94eb6d6a53f0da9eea1e503dd54fecfb19ef60b97b7392e59945fc95a2f9809ab247872a5f2", 0x2e}, {&(0x7f00000028c0)="34788358e1888ff531d97441b52bc75e3c6ea35a00f26bd4b4b7", 0x1a}, {&(0x7f0000002900)}, {&(0x7f0000002940)="578a5c23ee11819acbbea65f70221a041d8c032faafa79888a43250a098dba56a9c3fb9eb6e950e0adabd492a2c4e6b6dfb8c3f5b3baace082aacaf183331373982a1041ff3ec1ea0abdefaf0d92600ed56d9fa872184c1763372e06b3faec1454cafb1c7132d6e19e1835fb61adebcdf6abdf8756d1f85d650bcdb8b46ae98b60590d6fbb8e3242d6cd75bb37e33863715d724878f667ab69f1109fcbb8a9480831bcacc98bc8a6f50948d8fd206d29dd99361a4438c5a424acefa5289f8f79c07768b932b810e85fca1cd9da4241028662c3d7c36de8", 0xd7}, {&(0x7f0000002a40)="49d4ed978ecf0e3721535b1863523a1709740dcd8bb72ee66d0632e1fb5c5aefd93e92b53c7614f74ad6911385d670156a369b2fc0354d5f51d2006ccd1384", 0x3f}, {&(0x7f0000002a80)="d0cf1e9c03da23492ef7a9b84857d22cc81acb1f865da36242f446b2e3f12dea4d8e78a49d7bc2707ed90b2359b39bc550c418685d058ca2b9dc7467bded885abbad83fe415f572deb4c9446a16158f1b61cc9b5ffc7bbce15082f2267326551ccca222acf906f27460bdfdfa426956f8c48901b760c8f9a982498a7361598c7c7a1c790c24977", 0x87}, {&(0x7f0000002b40)="6f49d4408c4d4d2837110b1ba2978ac4ef78dec95e1f6d3102e7f3da2d896f4658a3bb6ebd73715730df91a715ef95fe1d4f51376e72a4157c106cca4a6bca0c55513d8266656c4a194ad82f960f2ae3d5fedea900d1160c51c2791fd0", 0x5d}], 0x7, &(0x7f0000002dc0)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}, @rights={{0x30, 0x1, 0x1, [r20, r21, r22, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x80, 0x40030}}, {{&(0x7f0000002e40)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000003480)=[{&(0x7f0000002ec0)="db5f9bf389cb072681fef183352e5caf3a1498555bc3f5f58526bc4c3b1544f3c4ee0ecb9b3c9ea91f95ec8547a4c3df270013b9fe51ab5364b80b4ece37e91d20906b4589dee43b2f0a92976663e60510e866e72f43676596c598528b02ad5e1866d6e8c01dd446492808a809e8cf448d29e7814efa72e2eb1dc89b71b67bad8ebcf8d11d1c775df3347b4a91f9d01c5da866fe18", 0x95}, {&(0x7f0000002f80)="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", 0xfb}, {&(0x7f0000003080)="d87423ffe2b049290386a1487b4f76a52401de3d2784436b5f526967eea9acf258a2fe1c3c782bfad5584cdc42e28ce62fdce6fd55067fb0368a56b7410a0963dea03a736fcf846937b8098cb305", 0x4e}, {&(0x7f0000003100)="85fd7a4409f066611026dc9b7a9dd2b7fd5d9b527696bce0ea58120903b8d49cce5be9e1f8b96a9d28cf70ec95a4fc90470fe4a997e103a47531f7c7ca17fb7b582512482eecfefc6a", 0x49}, {&(0x7f0000003180)="ffafa89f58244652627e656bd22a60222d20", 0x12}, {&(0x7f00000031c0)="b471a02357049281d0ad24c5284e8af644d7e79646153c42dfc73efd0c4b8e08e3fdca4d13b68fbdcafef6fbc9242ba98c3ea0c2036309d158c39eb5f05bf68324dd13b5cbcd03600dfe19f85798aceff562fbea28378ba3416cb67d79838a087fb59749142f2e", 0x67}, {&(0x7f0000003240)="2fab93de0bbac676", 0x8}, {&(0x7f0000003280)="f0ca77b93f4faec68138a1cb06c54561fb3f6282335e91ddfec91bf9ae99c6bdfb5ec5464e895e2780c1d2d5b6be00c8558694616f8accd1a44c6f9794089c276d0c651522c8b2bfb2f8eb663a575b91c68e09f1c460cacf48c11d4eafc708eab5bf2d05055ac5acd9d585456bf599d4339a79c24df14bd7d8f0e0e9ae01ccfc7601f7139cd0", 0x86}, {&(0x7f0000003340)="ec980bdeb4c9bc1b2ea581207692a42aed4221fc8e0d5e8eeaaedaf07f9f52281d26659f2d0f3583336aa80452a965a0b1d3f713f135771c40c86725f0f012fbd794a10b2bcc8fbfbdeb2b45f0b9a264691247ce47aa693adb4e531a6724342bab65c0f88794918eb7b8efb4adf9e50169964e979af22897e594b30e0d5fe1b7448d0e4e64afc8945a7f4ad3f30cfb2a10293038", 0x94}, {&(0x7f0000003400)="9a0829c17c384bea683b20c7159ee73440ab5f363bea27adfff5e4d2b8660729cbdb28ddddbe0071f5a62aacbe184c0886c076cc03cb75a51754f607a2b38356661fdae634a7ecb1ff25a71aa3b646b8203f15e5470f63298b7a10f9b43b7a020beca3057652c79d215d", 0x6a}], 0xa, &(0x7f0000003980)=[@rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r3, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, r0, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r2, r1, r3, r2]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r3]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, r3, r3, r1, r1, r1, r3, r1, r3]}}, @rights={{0x34, 0x1, 0x1, [r2, r1, r2, r1, r3, r1, r3, r3, r2]}}], 0x198, 0x44800}}], 0x4, 0x40010) 36.597762328s ago: executing program 0 (id=638): flock(0xffffffffffffffff, 0x6) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) read$eventfd(r1, &(0x7f0000000040), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x0, 0xa, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x22100, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0xdc9, 0x9}, 0x28, 0xd, 0x81, 0x8, 0x9, 0x8, 0xb7dc, 0x0, 0x5, 0x0, 0x7}, r3, 0x4, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc8a541, 0x162) 36.546079471s ago: executing program 35 (id=638): flock(0xffffffffffffffff, 0x6) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) read$eventfd(r1, &(0x7f0000000040), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x0, 0xa, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x22100, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0xdc9, 0x9}, 0x28, 0xd, 0x81, 0x8, 0x9, 0x8, 0xb7dc, 0x0, 0x5, 0x0, 0x7}, r3, 0x4, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc8a541, 0x162) 34.184833579s ago: executing program 2 (id=668): unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7fff, 0x80) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000000c0)=0xf) r1 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0xfffe, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @mcast2, 0x7da5}}, 0x24) 33.963593582s ago: executing program 2 (id=670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@newtaction={0x1f8, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x18, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x11, 0x6, "c92acebef543cf5eac95ff99fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x188, 0x1, [@m_simple={0x10c, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x40000000, 0x8, 0x9}}]}, {0xb9, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb55e8d86d594f207de74400f37d97ac2edd9679a28a6d5d37c8f9ba5b04948e6430ab3a406dc245121481beaaa9593cd5449ffcce2ab15cc0575cbe71"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x78, 0x17, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 33.841770339s ago: executing program 2 (id=672): fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fsmount(r0, 0x1, 0x0) (async) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 33.620334912s ago: executing program 2 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x3, 0x10}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) unshare(0x2a020480) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8941, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x20000000) open_by_handle_at(r2, &(0x7f0000000100)=@xfs={0x1c, 0x81, {0x7, 0x5b9868eb, 0x10001, 0x7fff}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301802c0002"], 0x428}}, 0x40088) r9 = syz_open_pts(r7, 0x181000) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000180)) ioctl$KDGKBMETA(r7, 0x4b62, &(0x7f0000000140)) 33.189522757s ago: executing program 2 (id=682): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x535, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x3}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0x560c89bb) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) write$tun(r7, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x3, 0x80, 0x5, 0xffff, 0x101, 0x5}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @mcast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x42) fchdir(r6) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 32.391060314s ago: executing program 8 (id=687): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000010000000100000000", @ANYRES32=r0, @ANYRES32=r1], 0x18, 0x4004064}, 0x40046) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002b"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000500)=""/250, 0xfa}], 0x1, &(0x7f0000000600)=""/164, 0xa4}, 0x4}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x23c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) socketpair(0xf, 0x3, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d95, 0x482, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xf1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socketpair(0xa, 0x1, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='!pu&20\t&&') io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 32.271916841s ago: executing program 2 (id=688): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6035, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCMSET(r2, 0x5418, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x10, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r10, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0xffffffffffffff99, 0x1b, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 31.462335608s ago: executing program 8 (id=691): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @empty, 0x9}, 0x1c) 31.001227805s ago: executing program 8 (id=696): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x101202, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/245, 0xf5}], 0x1, 0x647a, 0x7c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x24024410}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x44}}, 0x20044055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 30.838046345s ago: executing program 8 (id=699): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800e0001"], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000008c0)={[{@jqfmt_vfsv1}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) write$binfmt_elf32(r4, &(0x7f0000000840)=ANY=[], 0x349) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf98}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c2fb, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x5, 0xc}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x4000000a, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000300)=0xc) tgkill(r8, r9, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0xd3d, 0x1000, 0x1000}, 0x10) mbind(&(0x7f00004ee000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000004c0)=0x24, 0xff, 0x4) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 29.956017196s ago: executing program 8 (id=708): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x102004, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x8001, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x1, @perf_bp={&(0x7f0000000280), 0x8}, 0x120, 0x10000, 0x3, 0x0, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x242e, 0x4, 0x0, 0x5fc5}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x3275, &(0x7f0000000300)={0x0, 0x65c6, 0x20, 0x0, 0x1a1, 0x0, r6}, &(0x7f0000000380), &(0x7f00000003c0)) 29.230202219s ago: executing program 8 (id=715): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000680)={0x20000008}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000008c00000095000000000000009500ad0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 29.193319171s ago: executing program 36 (id=715): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000680)={0x20000008}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000008c00000095000000000000009500ad0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 17.274418389s ago: executing program 37 (id=688): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6035, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCMSET(r2, 0x5418, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x10, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r10, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0xffffffffffffff99, 0x1b, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.740745679s ago: executing program 3 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0, 0x1000000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2508, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x444a01, 0x0) write$tun(r6, &(0x7f0000000540)={@void, @val={0x0, 0x8e268e1cd2130c61, 0x4, 0x1, 0x3, 0x10}, @llc={@llc={0xe, 0x42, '[', "a6261c531f9fb723ac051424e1291e78f3bc285ee6192bf405c5abb0d57d5df918fccab4f80b6e5d51cc08f1a4fdbc08d87e70ba416867"}}}, 0x44) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'hsr0\x00', 0xc0008}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'bridge0\x00'}, 0x18) 15.531183791s ago: executing program 3 (id=909): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x600, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$full(0xffffffffffffff9c, 0x0, 0x204800, 0x0) 15.439877126s ago: executing program 3 (id=912): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(r0, 0xb) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) tkill(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) (async) shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) (async) shmctl$SHM_LOCK(r0, 0xb) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) tkill(r1, 0x9) (async) 14.678191201s ago: executing program 3 (id=926): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x1, 0x23d, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus/file0\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x2, 0xa}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0xb3, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cbd678cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0xe0b2, 0x66798cf9) 13.906021136s ago: executing program 3 (id=937): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@newtaction={0x204, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_simple={0x64, 0x18, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x1d, 0x6, "c92acebef543cf5eac95ff99fd6f0f8ca3945cf1e27303fef4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x188, 0x1, [@m_simple={0x10c, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x40000000, 0x8, 0x9}}]}, {0xb9, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb55e8d86d594f207de74400f37d97ac2edd9679a28a6d5d37c8f9ba5b04948e6430ab3a406dc245121481beaaa9593cd5449ffcce2ab15cc0575cbe71"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x78, 0x17, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13.513954289s ago: executing program 3 (id=944): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) 13.49609254s ago: executing program 38 (id=944): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) 4.637068898s ago: executing program 1 (id=1076): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x40, 0xff, 0x0, 0x80000007}, {0x6, 0x60}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x3ff) write$ppp(r0, &(0x7f0000000100)="5fa5", 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x15}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) openat(r3, &(0x7f0000000180)='./file0\x00', 0x20402, 0x42) cachestat(r3, 0x0, 0x0, 0x0) listen(r2, 0x9) readv(r1, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/153, 0x99}, {0x0, 0x224e}], 0x2) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="980000001600010025bd7000fedbdf250a80a0fd", @ANYRES32, @ANYBLOB="14000100fe800000f7ffff0a00000000050000ce150002"], 0x98}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) 4.505335946s ago: executing program 1 (id=1079): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000100000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000280000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)=0xb46) setfsuid(r1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0xc, 0x2010}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xac}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 4.450923769s ago: executing program 1 (id=1080): io_cancel(0x0, 0x0, &(0x7f0000000480)) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @broadcast, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) close(0x3) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/92, 0x5c}], 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0xbffc, 0x27b6a97, @local, 0x9}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.388561753s ago: executing program 9 (id=1081): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r3 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r3}, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIxtsKc99aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4ku0QWUqtzweOde659+p7joSO7rn3+CqAvnUmIs5GxKNqtXo+IoYb5ZlGis16qm338MGdmVpKolq9/kkSkdTLapuNbXnOY43dDkfEH38X8Zfk2bjl9Y3F6WKxsNpYzleWVvLl9Y0LC0vT84X5wvLk5MTlqStTl6bGO9LOoYi4+psP/v2PV3579Y2f3Xr3xkdjf00a5RFP2tFp9aZn09eiaTAiVvcjWI8Mpi0EAODboHmc/+OIOB/DMZAezQEAAAAHSfWXQ/FVElEFAAAADqxMOgc2yeQa8wCGIpPJ5epzeL8fRzPFUrny07nS2vJsfa7sSGQzcwvFwnhjrvBIZJPa8kSaf7J8cdvyZESciIh/DR9Jl3MzpeJsr09+AAAAQJ84tm38//lwffy/xZc9qxwAAADQOSM7rTzUvXoAAAAA+2fH8T8AAABwIBj/AwAAwIH2+2vXaqna/P3r2Zvra4ulmxdmC+XF3NLaTG6mtLqSmy+V5tN79i3t9nzFUmnl57G8djtfKZQr+fL6xo2l0tpy5cbCUz+BDQAAAHTRiR/deyeJiM1fHElT+I9/6BuDz7Px+/tXD6D7BnpdAaBnnuv7HzhQsr2uANBzyS7r207eebPzdQEAAPbH6A9aX/8f2PXcwGamS1UE9onzf9C/XP+H/uX6P/SvbAyEgTz0t91uAfri1/+r1eeqEAAA0HFDaUoyuYj0PMBQZDK5XMTxdEyQTeYWioXxiPhuRLw9nP1ObXki3TPZdc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAA60iMyHSXo3/4jR4XND288PHEq+GE4fI+LW/67/5/Z0pbI6USv/9HF55b+N8ou9OIMBAAAAbNccpzfH8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQSQ8f3Jlppm7G/fjXETHSKv5gHE4fD0c2Io5+lsTglv2SiBjoQPzNuxFxslX8pFatGGnUolX8Iz2Of6wD8aGf3av1P79q9fnLxJn0sfXn73LaQ7249v1f5nH/N9Aifq3s+B5jnLr/Wr5t/LsRpwZb9z/N+Emb/ufsHuP/+U8bG+3WVf8fMdry+yd5Kla+srSSL69vXFhYmp4vzBeWJycnLk9dmbo0NZ6fWygWGn9bxvjnD19/tFP7j7aJP7JL+8/tsf1f37/94Hv1bPbx7smT+GNnW7//J9vEzzTe/5808rX1o838Zj2/1elX3zq9U/tn27R/t/d/bI/tP/+Hv7+3x00BgC4or28sTheLhdW+zrzQq1E7LHopWvHSZWoHpMXa6/qS1OeZzN/24ZlrR+a9blcnMj3tlgAAgH3w7BgYAAAAAAAAAAAAAAAAAAAA6LZu3E4suy3mZvq3E3fPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADonG8CAAD//+y20KM=") setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000000000002004e24e000000200"/126], 0x210) lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0xd5, 0xb5, ""/181}, &(0x7f0000000200)=0xd5, 0x0) 3.40987339s ago: executing program 1 (id=1093): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25e0000001000000000000000000000000000000000000000000000000000000010000000004070000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b\x00\b'], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4004040) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r2, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010026bd7000fddbdf2502200000000020"], 0x24}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r5, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/150, 0x96}, 0x73}], 0x1, 0x40010003, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa8cf4231300000008004500001cc89252f33be0610f000000000000ffff00004edef40c1c6c3fd02000089078"], 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x5}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1300000000200000", @ANYRES32, @ANYRES32, @ANYBLOB="8a001cf5d4a191128f374274bfd7b738ac47d8b96ea5e97475bf2c312bce2cd7bc3e2edf997e1d2b9823624ffe745b913452cea190611182a952aebc9869abc7015f592e8d6f7874c38a429ab99c8350", @ANYRES64=0x0], 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101042, 0x100) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2.89783814s ago: executing program 5 (id=1103): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2.617858077s ago: executing program 5 (id=1106): r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb6, 0x20, 0x86, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x4, 0x44, 0x1, {0x22, 0xde0}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x75, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0xf9, 0xa8}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x6, 0xb5, 0xff, 0x10, 0xfe}, 0x9a, &(0x7f0000000180)={0x5, 0xf, 0x9a, 0x3, [@generic={0x7a, 0x10, 0x1, "7809d1d67b6179640e139e28aa409f04370d564d071994a6c9c26cd9fd48432c7dbac3a255c671f29eb7c3586049fa6c74dcd45538d31e5038fb6c54a0956dea37e21799a8d279099495061fbeaeb946983b1632a237dc16544da34414abc373ec788ee6cbc818b33b7d074b51a26b5a71909be37715e1"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x6, 0x3, 0x94, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x8, 0xf00, 0xd, [0xff0000]}]}, 0xa, [{0xdd, &(0x7f0000000280)=@string={0xea, 0x3, "c927865b40b091d0d607866c0adc606b83965afa8f7d50094584a1fa1bde955c9e3d41067717aa117b2b45d322ac5f84041cdaa3491360762230b394cace9cf95eca50806a6788efcb979b64ba57681edc19fb19fc57dc8aeb985412394f7a2bc81d7ba66f29a56d0778f9109625d53e171ddc940339b3beca9c83d7e74eebc8e3c5e387d5dc6f04e8c5c6ad3e9cf30ef0d9cd985383bce039c7d9c57f5c9f76334e0a42a5946cdef6fdb7b9b0725afbcf544810a26796e1256774d6c78edb197e19199f7a5bb1a8ea9d0832a7e0c5515b1e9d9c82f6a24302ab84280cde70d9f38262fb662fbf81"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x340a}}, {0x62, &(0x7f00000003c0)=@string={0x62, 0x3, "43380f044769876d2e67fae716cf5ff73583ef868b35cc2b9ecdaf4290b249d1c2e48002746954b831cfca04bfda49e2d1697f4fec2dc8c32f5d64a3266b8883b899ec9b40f0b998d899ab44744b21f1fe2dff4573ca467eff0451795e3cf947"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x816}}, {0xcc, &(0x7f0000000480)=@string={0xcc, 0x3, "50b87f5fe1edde2339af60232702af659ecf6bc37447ebc9147a2e074ea8895d89deded8ba85160367552c77505e0500f5bedb47faa3b67a71993c32c095875d986436f74c6b17c1af48f9cde8cbf3d7f084051e61d783899c115c393a35a063d7b502f39ed8b593f79dd7145a3499e9c0d51fc2fb50f5536f517298aceaa357f1a8c715cafd3473b7456efbff36d808cb43d7c62508140ab50433424613cfb1245aa7bc92412d122a03d71dfaa5047579b99c537127ef9318fa0567dcaacf5e127997574e7464fadbb6"}}, {0xd2, &(0x7f0000000580)=@string={0xd2, 0x3, "8c053fb6ea844cfda71caa3483d8b9139854bcc94d3ad060e9da92c634cd92ef2a8daf316fd7a9f50a29da8752f439004329cd959a46c60621cecea214ba01478a98715b95e0cb6583391dc82cb12d6d86505fb9ad011f12842dcf8b91d918cad4cf30ab8b3e5dbea2f1a6b0698ded728eb994bf8d7740596e06fbdb01c4228b2d23c253bb9e16288412dbab9fd557d36448e92ad4804a29f5ff2f0b3b01a642ad9a736ddad731b5f59227fbd78ad224d11cc0a7240a8bde16d9db442de19d94af69052f45ba23bad6010b0ac92bdc39"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x601}}, {0xba, &(0x7f00000006c0)=@string={0xba, 0x3, "11866bd5cc02b762967623cc6a6dff200d794b4148786cf05b09329255b610c748d790b9595ca9a99201965eadfb6858e2112d4c945a5e408009181164435ac7f4de51b5e8a2ef53a422e9970d9e54ff1d928797473f37a02b8d19601388c1649f10d80f254d9098c9054fd0167e0fb9785963761a6f2aad36edb86db5597af19ce3b502e01989a2ca1e1a6bcb8192b0a36d7b7520d75f4ebcd0f0ec2433d46b71920a0e1eca7088cbcf6a240c724735907ddb42b29d8bf5"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x0, &(0x7f0000000d80)=@lang_id={0x0, 0x3, 0x416}}, {0x0, &(0x7f0000000dc0)=@lang_id={0x0, 0x3, 0x100a}}, {0x0, &(0x7f0000000e00)=@string={0x0, 0x3, "8a4a6aecba27abfb32e6d2249bebd49fabab9d3c7eafc15bfe328484b2deb6c2b3da103f534f60f4b28a86e93b7e735a4e1ef51b1e231faab67a3329ee10d74d59532c844fcd66befc871a49896593cda8596aa7276d2d8fb8ce5f4933411e8903160fdd5d32597c9ff59c0cfb9518cc29746271efff81fce4118e5519f6a712af684be0e142a63d49d369869ed8f640fda27c3a3b39545aabe61cc9bff97a940a4018cfca22111fefa3353c337439cf11e579b1e612085b468120f139375712210fce03ad2dec5c9144939ca6"}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x54}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)={0x44, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, &(0x7f00000008c0)={0x40, 0x5, 0x8c, {0x8c, 0xd, "3b2791263a7b854905d8b1f6d010ee37d368014ebfe1f330a993d4d5c1a0e83b6ec96bdb6df58d13fae0c4a29809cd4f6a0343c96243ca5aa52b02a0b31e3a8058ce235add1d4947045aac324161ad540513b963734a350e4b54aa5629791938f9727be41d66ce25c1b508445974974b24eab980263343871ec8ef3290c2b18a706774c1f492a5bca9f6"}}, &(0x7f0000000980)={0x0, 0x3, 0x20, @string={0x20, 0x3, "0f4dfa666dd1cae1213c466e6d124558ad033cb079737c5de44f385e70bd"}}, &(0x7f00000009c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "43e05d33"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xd, 0x1, {0x22, 0xa5f}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000a80)={0x0, 0x6, 0xd2, "98bcc5560c5b4c63c2940a372b547effd0e30490a352ff395f0d51e25f997791ba8668132f781c48546273db9979a447b49b89da3ebaab4d5730e9da2f845a18fa180b54b22a43be10ff6baa3a16835c14561645fb21d0001d88eb85b3e973b5ca7573758f21df3b1e0e8887c896501d2469c513f1de30df2854102f36e631f42ff7f47c4f11ba91978fa7eb75e767b0e5ef05fc2add7a93899b902fb52952d3c0d8939d57a9db2f66d6ddd4d8b67b68536ae3cd111d53f6290469a45ec597aced04a4a859a7eddbe2f2867fa13662f0970e"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000c00)={0x20, 0x1, 0xca, "c6e9e62a8469f8f691f86bcba1c2d2286d4e4ef2e57e9a97a66a87fdeec7312b3178f3e14c2b39fce7d83b4967edd0410d9a9cdfe0af266a7d2d608ccadcf7eb7a4603dbf0f20fcf294c3284b6ca0b0a9cc8a43284b843ecb2796fe523ce0a2223f64e27653307690f93ffb0b236bd5d305006541ce81d4c386e12f5556ab6bad4669caaa243da2de871fb126e8a0e399166649224d07a67ae358675ffed8898eb5f9156392c5ab5282d2cc22607f7202b0360f6cb0ff2aec241227bc0378850eb53b870d798d308a784"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x9}}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r4 = dup(r3) r5 = eventfd2(0x0, 0x800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x600) close(r5) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000008000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc8, &(0x7f0000000fc0)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0xc00, 0x0, 0x4, 0x0}) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0', [{0x20, '&^,-,/(/\xfd'}, {0x20, 'rfdno'}, {}, {0x20, '$=\x80'}, {0x20, 'wfdno'}, {0x20, '9p\x00'}, {0x20, '.!\xdf'}, {0x20, ']..'}, {0x20, '/dev/bus/usb/00#/00#\x00'}], 0xa, "5277e892"}, 0x4c) 2.596746448s ago: executing program 9 (id=1107): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x19, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.369445151s ago: executing program 1 (id=1108): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$eJzs3WFrI2kdAPD/TJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1ttpRNm9Kk57Yc2sMXvhREVPAD+EbwAwhyH0GEA30vKoronr7UHUkywbRNmtCmm176+8E0zzOTef7/Z2gmk5mHmQAurRci4m5EFCLipYhYyOen+RQHnan1vg8evbPampLIsrf+kUSSz+u21arPRMS1fLW5iPjm1yJupMfjNvb2H6zUatWdvF5pbm5XGnv7tzc2V9ar69WtpaXFV5dfW35l+U6WO1M/SxHx+lf+8pMf/uKrr//mc9/5472/3fpuK98vfaKTd0SsninAAJ22i+1t0dXaRjvnEWxCWv0pFiadBQAAo2gdmn80Ij7dPv5fiEL7aA4AAACYJtkb8/GfJCIDAAAAplYaEfORpOV8LMB8pGm53BnD+/G4mtbqjeZn79d3t9ZayyJKUUzvb9Sqd/KxwqUoJq36Yj7Gtlt/+Uh9KSKeiYgfL1xp18ur9drapE9+AAAAwCVx7fnDv///vZC2ywAAAMCUKfVWCme70RYAAABwMZUmnQAAAABw7vz+BwAAgKn29TffbE1Z9znea2/v7T6ov317rdp4UN7cXS2v1ne2y+v1+nr7nn2bw9qr1evbn4+t3YeVZrXRrDT29u9t1ne3mvc2Dj0CGwAAAHiCnnn+vT8kEXHwxSvtKfL7AA4ze+6ZARfKnyedADBOhUknAEzMzKQTACamOPQd9hAw7ZIhy48P3umcK4zfnk8+AADA+N385PHr/91r+8PPDQAfZqOM9QEApoure3B5FU87AvD6uDMBJuUjnZenBi0fePOOEa7/d84xZJ4rCgAAEzbfnpK0nB+nz0ealssRT7cfC1BM7m/Uqnfy3we/Xyg+1aovttdMho4ZBgAAAAAAAAAAAAAAAAAAAAAAAAA6siyJDAAAAJhqEelfk/bd/CNuLrw4f/jswJGnfv38rZ8+XGk2dxYjZpN/LrRmzUZE82f5/JczjwQAAACAC6DzOz1/XZx0NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMmw8evbPanZ5k3L9/OSJK/eLPxFz7dS6KEXH1X0nM9KyXRERhDPEP3o2I6/3iJ/E4y7JSnkW/+FfOOX6pvWnmsiR/b2/8NCKujSE+XGbvtfY/d/t9/tJ4of3a//M/c+TzeFrd/d9sXu+N393/FQbsf57uraeDYzz7/q8qA+O/G/HsTCfu3Ti8/+nGTzrxkzgS/8aIffz2t/b3+y7oabLf/q83VqW5uV1p7O3f3thcWa+uV7eWlhZfXX5t+ZXlO5X7G7Vq/rdvmB996tePT+r/1QHxS4f7f2z7vzhS77P47/sPH32sUyn2i3/rRv/v3+sD4qf5d99n8nJr+c1u+aBT7vXcL3/33En9XxvQ/7kh/b81Uv/jCy994/t/6rvk2NYAAJ6Ext7+g5VarbpzQmFuhPeMXCiMpZ03xpbPRSnExUhjUoXse53/x7O1c8bVjxWy6g9Ov/pMjCGN2WOf00KctsEk4qDV1oj/kAAAwJT5/0F/MulUAAAAAAAAAAAAAAAAAAAA4NI65W3J5iKiM6c4/HZiR2MeTKarAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn+l8AAAD//5uvyeM=") 2.319138024s ago: executing program 1 (id=1110): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000061db000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b1be00008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f0000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) sched_getparam(r1, &(0x7f0000000180)) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 2.282195856s ago: executing program 9 (id=1111): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000003c0)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@check_strict}, {@hide}]}, 0x1, 0x688, &(0x7f0000000a40)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x922, 0x12) (fail_nth: 1) 1.821080163s ago: executing program 4 (id=1114): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=0x6e) r3 = getpgid(0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r7, r7) setresuid(r6, r7, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7c19a18a250b02745b5c43f445c99dda6c551cbf58490916ff11a80885af5994df36366edf8986ba74125347da4836c1ef2c034a638c0449894d31f507bd46e99f317cd3254f71541d065a9b9b4810dde423c77fd1bbfbec08d6bdc5236f0e17be25180ed023a651926cf2efef729a3c591cad237af059791b80d83bc1f46923eaaf3f74dd551516e92996535bcf95ece6a464f732e0b9fda5e4687f67163d4f41f3a204cdbf440f88ab69818beecb628e5fa5514e94d90c5ae2d9cc2acc1662ba36bc363d91d4ccc19e69889f2bd0bb0f8f5a0078f13c75272dee05f228fcae5f70eef68d5677dadd4629f51c185371fc5a8b43d750b4c1", 0xf8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=0xee00, @ANYBLOB="00004061e6860000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40014}, 0x80) r11 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r11], 0x18}, 0x40c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = socket$netlink(0x10, 0x3, 0x12) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount(&(0x7f0000000640)=@rnullb, &(0x7f0000000680)='./file0\x00', &(0x7f0000000840)='virtiofs\x00', 0x8008, &(0x7f0000000940)='\x00') 1.796340935s ago: executing program 9 (id=1115): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000540)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x6a040000) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1094ec, 0x8, 0x3, 0x288}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x4b2) keyctl$restrict_keyring(0xa, r1, 0x0, 0x0) keyctl$set_timeout(0xf, r1, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="026e09b47a07f4d5957ddd0adae1187fb748fb819a81b713c80823f97d2dfad509c7399dc88729e9a178c6b04c2d8eda441799f0d78f883f4880a500ec9a8f18d1f873124347d65307815c52e1253ea25cb74f432f50d42a7fd1f3", 0x5b, r1) 1.757844637s ago: executing program 4 (id=1116): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") sigaltstack(&(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)={0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00010000ddfffffdffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000000000000000e4ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000000810000000000000009000000000000000001"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r0, &(0x7f0000001a00)=""/4096) (async) getitimer(0x1, &(0x7f0000000200)) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0xe, 0x0, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x83, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) (async) r2 = syz_clone(0x4200, &(0x7f0000000140)="d8a62385fd680bce33ed3577dffa3a6656254590fdd654284e8d4c694adc16c8b3c21d5a27c2e5be3aa461ccef88dfcdbe2187dc2d0eab86b50b522ba09c56360151c70f78a0622e358cb601fd1f9c2677c310c786be52545fe917d006873b181897c86393056a2d03b4c388a7dccb99b4910dd719cd654a639752b42667efd7fb325e7cf7a0b3ac6b4b6141696885af5992c121ebc64296b2933f", 0x9b, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000a00)="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") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={&(0x7f0000000240)=""/60, 0x3c}) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x80044944, 0x0) (async, rerun: 64) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.583126937s ago: executing program 5 (id=1117): syz_read_part_table(0x405b, &(0x7f0000000000)="$eJzszkFKw0AYBeCXxJq0VNy4lFIvIHHnSrxEbuJWEHqbXMADeQX3itWmqXYh0oXi923mzc+b4Q+/wXOZpP5m+aUY4vIiq7Y9eotVMl3PnkbV9iqTWVNmnuRuMv5k/abrD7E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwZ1TbONu5JVnue1AM6XqeNMXH/WFxkrPUudw2m6Tc5DrTYd71h1kdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgX7kf5fH/l+P0os3OubhbVp+LtJjTD6DE5/fpj1/90XQAAAOCVHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw5kAAAAAIT5W+fRfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KAAD//wJJDDU=") 1.490145173s ago: executing program 7 (id=1118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0, 0x1000000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2508, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'hsr0\x00', 0xc0008}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'bridge0\x00'}, 0x18) 1.487794793s ago: executing program 4 (id=1128): r0 = getpid() r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x13c2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x9}, 0x103e40, 0x1, 0x0, 0x0, 0x0, 0x40, 0xfc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fff800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.19791187s ago: executing program 5 (id=1119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25e0000001000000000000000000000000000000000000000000000000000000010000000004070000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b\x00\b'], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4004040) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r2, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010026bd7000fddbdf2502200000000020"], 0x24}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r5, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/150, 0x96}, 0x73}], 0x1, 0x40010003, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa8cf4231300000008004500001cc89252f33be0610f000000000000ffff00004edef40c1c6c3fd02000089078"], 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x5}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1300000000200000", @ANYRES32, @ANYRES32, @ANYBLOB="8a001cf5d4a191128f374274bfd7b738ac47d8b96ea5e97475bf2c312bce2cd7bc3e2edf997e1d2b9823624ffe745b913452cea190611182a952aebc9869abc7015f592e8d6f7874c38a429ab99c8350", @ANYRES64=0x0], 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101042, 0x100) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.181876021s ago: executing program 4 (id=1120): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000003c0)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@check_strict}, {@hide}]}, 0x1, 0x688, &(0x7f0000000a40)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x922, 0x12) 1.147548383s ago: executing program 7 (id=1121): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x19, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.026667s ago: executing program 4 (id=1122): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) r0 = socket$inet6(0xa, 0x80002, 0x0) futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x19) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)={@loopback, @multicast2}, 0x10) 857.88506ms ago: executing program 9 (id=1123): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000040)=[{0x6, 0xfc, 0x0, 0x1fe}]}) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) (async) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x14, 0x0, &(0x7f0000000200)="c8bb4e7dbde79f73008865000800b0ad75acd2df", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xc8, &(0x7f0000000040)=""/200}, 0x94) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/pm_debug_messages', 0x1, 0x70) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x4}}, './file1\x00'}) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8, 0x20132, 0xffffffffffffffff, 0x367c7000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$poke(0x4, r5, &(0x7f00000011c0), 0xfffffffffffffffe) (async) syz_io_uring_setup(0x6788, &(0x7f0000000540)={0x0, 0x5534, 0x8000, 0x3, 0x99}, &(0x7f00000004c0), &(0x7f00000005c0)) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000000)=']', 0x1}], 0x1, 0xffff8000, 0x9, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000002c0)={0x3a, 0x10, '\x00', [@generic={0x68, 0x26, "68e1195af8916a374fc4e0c69fc78e9d20cbea84bb2aa476f40477a20eaf49f14b9aeb2ca0ee"}, @pad1, @generic={0x1, 0x59, "789dcaf1cf0f9971a70681ed10bf6b3197a0db8e131ddc8f5aa3ddde41fe6cda585ca7a55586cdd4fb9caeb6a0da34d7e1cdbb94df8e084f28a0bafb4a219f4fba16a09f696e7ae42760ce64dfb5ea648c195e4ddba1f3a346"}]}, 0x90) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000002800)) 796.953683ms ago: executing program 7 (id=1124): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x7, 0x0, 0x9, 0x690bb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xc81, 0x400, 0x43a1bd77, 0x7, 0x3, 0x6, 0x2, 0x0, 0x40, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x20c031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) 665.033361ms ago: executing program 7 (id=1125): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@newtaction={0x204, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_simple={0x64, 0x18, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x1d, 0x6, "c92acebef543cf5eac95ff99fd6f0f8ca3945cf1e27303fef4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x188, 0x1, [@m_simple={0x10c, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x40000000, 0x8, 0x9}}]}, {0xb9, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb55e8d86d594f207de74400f37d97ac2edd9679a28a6d5d37c8f9ba5b04948e6430ab3a406dc245121481beaaa9593cd5449ffcce2ab15cc0575cbe71"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x78, 0x17, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 586.683616ms ago: executing program 7 (id=1126): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000003c0)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@check_strict}, {@hide}]}, 0x1, 0x688, &(0x7f0000000a40)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x922, 0x12) (fail_nth: 2) 177.88791ms ago: executing program 7 (id=1127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x7, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20000404) timer_create(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x488, 0x30, 0x12f, 0x20, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x78, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x4, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x9, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x4000011, 0x188, 0x6, 0x5, 0xb, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x8, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x801, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0xae, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x3, 0x2000007, 0x0, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x1000003, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe57, 0x4, 0x2, 0x84, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x1, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x7, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x9, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x100400, 0x5, 0x3, 0x0, 0x797, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x1, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0x0, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x5, 0x6, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x77a, 0x80a, 0xfffffffb, 0x3ff, 0x3f7, 0x4, 0x6, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c00018006000280050001002f0000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c0002800500010000000000050001"], 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xd82, 0x0, 0x3}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@dax_never}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800086a}}, {@jqfmt_vfsold}, {@init_itable}, {@quota}]}, 0x3, 0x451, &(0x7f0000000c00)="$eJzs3EtoXNUbAPDvzqP9p49/YqmPPtRoFYuPpElr7cKNouBCQdBFXcYkLbXTRpoIthSNInUlUnAvLgU3bl3pRtSV4FY3rqRQJJtW3YzcmXuTmcnkNU4y0fn94Lbn3HuG831z75k5955OA+hbw+kfScSeiPg5Igbr1eYGw/W/bi9cnfxj4epkEtXqK78ntXa3Fq5O5k3z1+3OK6WIwgdJHGrT7+zlK+cnKpXpS1l9dO7Cm6Ozl688ce7CxNnpv6p1Y0+dHH+yK3mmed06+M7M4QMvvHb9pcnT11///oskz78ljy4ZXu3gw9Vql7vrrb0N5aTUw0DYkGJ9mEa5Nv4HoxhLJ28wnn+/p8EBmyr9lr1r5cPzVeA/LIleRwD0Rv5Fn97/5tsWTT22hZvP1G+A0rxvZ1v9SCkKWZtyy/1tNw1HxOn5Pz9Nt9ic5xAAAE2+Tuc/j7eb/xWi8bnQ/7M1lKGIuCMi9kXEyYjYHxF3RtTa3h0R92yw/9ZFkuXzn8KNjhJbp3T+93S2ttU8/8tnfzFUzGp7a/mXkzPnKtPHsvfkaJR3pvWxVfr45rmfPs6KX/7acqxx/pduaf/5XDCL40ZpZ/NrpibmJppD7NzN9yIOltrlnyyuBCQRcSAiDnbYx7lHPz+80rG1819FF9aZqp9FPFI///PRkn8uWbY+eXb64vipUyeO19YnR/8Xleljo/lVsdwPP157eaX+/1H+XZCe/11tr//F/IeSxvXa2Y33ce2XD1e8p+n0+t+RvNq07+2JublLYxE7khfrQTfuH29pN77UPs3/6JH2439fLL0ThyIivYjvjYj7IuL+LPYHIuLBiDiySv7fPfvQG53nv7nS/Kc2dP6XCjuidU/7QvH8t181dTq0kfzT83+iVjqa7Vn8/FvFeuLq7GoGAACAf59CROyJpDCyWC4URkbq/4Z/f+wqVGZm5x47M/PWxan6bwSGolzIn3QNNjwPHctu6/P6eEv9ePbc+JPiQK0+MjlTmep18tDndkep7fhP/VbsdXTApvN7Lehfxj/0L+Mf+pfxD/2rzfgf6EUcwNZr9/3/bg/iALZey/i37Ad9xP0/9C/jH/qX8Q99aXYg1v6RvILCskIUtkUY6yx8VN4WYaxd2Lnu/7qig8JARKy3ca8/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrj7wAAAP//h8/rXw==") 163.345601ms ago: executing program 5 (id=1129): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") 130.208193ms ago: executing program 9 (id=1130): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x80000000, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007910b8000000000005000000000000009500000c00009b00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 410.74µs ago: executing program 4 (id=1131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@loopback, @initdev, 0x0}, &(0x7f0000000140)=0xc) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x80000000, '\x00', r2, r3, 0x5, 0x0, 0x5}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x1, 0x31, &(0x7f0000000000), 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010f0300704019c8cbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000004000198014000400989a12b83b6b2737c3f38f340933ae3c05000600020000000900020025d741250000000014000400b12c643773f9f86179f7f2472f6eb671"], 0x60}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) 0s ago: executing program 5 (id=1132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000b007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) kernel console output (not intermixed with test programs): hout journal. Quota mode: writeback. [ 76.121175][ T1659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.128689][ T1659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.131664][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.138741][ T6013] ------------[ cut here ]------------ [ 76.150738][ T6013] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 76.175603][ T6013] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.7.648/6013 [ 76.181179][ T6016] netlink: 56 bytes leftover after parsing attributes in process `syz.2.655'. [ 76.186736][ T6013] Modules linked in: [ 76.199459][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: syz.7.648 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.209273][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.219442][ T6013] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 76.225875][ T6013] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 76.245706][ T6013] RSP: 0018:ffffc90003d9f388 EFLAGS: 00010246 [ 76.251836][ T6013] RAX: ffff888104313c10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 76.259896][ T6013] RDX: ffffffff867f0650 RSI: ffffffff866bb3e5 RDI: ffffffff86fb96f0 [ 76.267980][ T6013] RBP: ffff88810ad2f270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 76.276025][ T6013] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88810ad2f230 [ 76.284110][ T6013] R13: 00000000ffffdfcc R14: ffff88810ad2f27c R15: ffff88810ad2f268 [ 76.292129][ T6013] FS: 00007f8f7f0ee6c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 76.292364][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 76.292399][ T29] audit: type=1326 audit(1769490313.544:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.301280][ T6013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.328098][ T29] audit: type=1326 audit(1769490313.564:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.330990][ T6013] CR2: 00007f8f7f0edff8 CR3: 000000011b41c000 CR4: 00000000003506f0 [ 76.337383][ T29] audit: type=1326 audit(1769490313.564:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.337420][ T29] audit: type=1326 audit(1769490313.564:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.360955][ T6013] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.369186][ T29] audit: type=1326 audit(1769490313.564:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.392293][ T6013] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 76.415673][ T29] audit: type=1326 audit(1769490313.564:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.415710][ T29] audit: type=1326 audit(1769490313.564:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.423882][ T6013] Call Trace: [ 76.447306][ T29] audit: type=1326 audit(1769490313.564:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.455335][ T6013] [ 76.455357][ T6013] reg_set_min_max+0x1c8/0x260 [ 76.478830][ T29] audit: type=1326 audit(1769490313.564:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c5caeb9 code=0x7ffc0000 [ 76.560226][ T6013] check_cond_jmp_op+0x13bd/0x1a80 [ 76.565537][ T6013] do_check+0x440c/0x9060 [ 76.569930][ T6013] do_check_common+0xd0f/0x1630 [ 76.574976][ T6013] bpf_check+0x2f6d/0xc7e0 [ 76.579412][ T6013] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 76.585596][ T6013] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 76.591323][ T6013] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 76.597498][ T6013] ? pcpu_block_update+0x24e/0x3b0 [ 76.602666][ T6013] ? _find_next_zero_bit+0x29/0xa0 [ 76.608326][ T6013] ? pcpu_block_update+0x24e/0x3b0 [ 76.613761][ T6013] ? _find_next_zero_bit+0x29/0xa0 [ 76.618990][ T6013] ? pcpu_block_refresh_hint+0x157/0x170 [ 76.624827][ T6013] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 76.631091][ T6013] ? __rcu_read_unlock+0x4e/0x70 [ 76.636200][ T6013] ? trace_call_bpf+0x33b/0x420 [ 76.641180][ T6013] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 76.647089][ T6013] ? security_bpf_prog_load+0x60/0x140 [ 76.652646][ T6013] ? perf_trace_kmalloc+0xe4/0x110 [ 76.657892][ T6013] ? __kmalloc_noprof+0x4a3/0x580 [ 76.663031][ T6013] ? security_bpf_prog_load+0x60/0x140 [ 76.668624][ T6013] ? selinux_bpf_prog_load+0xac/0xd0 [ 76.674128][ T6013] ? security_bpf_prog_load+0x9e/0x140 [ 76.679692][ T6013] bpf_prog_load+0xf76/0x1140 [ 76.684716][ T6013] ? security_bpf+0x2b/0x90 [ 76.689360][ T6013] __sys_bpf+0x469/0x7b0 [ 76.693744][ T6013] __x64_sys_bpf+0x41/0x50 [ 76.698279][ T6013] x64_sys_call+0x28e1/0x3000 [ 76.702974][ T6013] do_syscall_64+0xc0/0x2a0 [ 76.707677][ T6013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.713692][ T6013] RIP: 0033:0x7f8f80e0aeb9 [ 76.718149][ T6013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.737938][ T6013] RSP: 002b:00007f8f7f0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.746418][ T6013] RAX: ffffffffffffffda RBX: 00007f8f81086270 RCX: 00007f8f80e0aeb9 [ 76.754548][ T6013] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 76.762842][ T6013] RBP: 00007f8f80e78c1f R08: 0000000000000000 R09: 0000000000000000 [ 76.770900][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.779093][ T6013] R13: 00007f8f81086308 R14: 00007f8f81086270 R15: 00007ffe56e99d48 [ 76.787198][ T6013] [ 76.790265][ T6013] ---[ end trace 0000000000000000 ]--- [ 76.807504][ T1659] veth1_macvtap: left promiscuous mode [ 76.813161][ T1659] veth0_macvtap: left promiscuous mode [ 76.823454][ T1659] veth1_vlan: left allmulticast mode [ 76.828801][ T1659] veth1_vlan: left promiscuous mode [ 76.834601][ T1659] veth0_vlan: left promiscuous mode [ 76.917894][ T1659] team0 (unregistering): Port device team_slave_1 removed [ 76.928693][ T1659] team0 (unregistering): Port device team_slave_0 removed [ 77.045870][ T29] audit: type=1400 audit(1769490314.284:1102): avc: denied { connect } for pid=6033 comm="syz.5.662" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.095841][ T5560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.141579][ T6046] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.171403][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 77.187615][ T6046] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.257824][ T6046] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.283661][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.305650][ T1659] IPVS: stop unused estimator thread 0... [ 77.343496][ T6046] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 77.396773][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.410134][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.414351][ T6046] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.664: corrupted inode contents [ 77.417817][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.436699][ T5946] bridge_slave_0: entered allmulticast mode [ 77.447735][ T5946] bridge_slave_0: entered promiscuous mode [ 77.465626][ T6046] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.664: mark_inode_dirty error [ 77.477810][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.485149][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.492891][ T6046] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.664: corrupted inode contents [ 77.506263][ T6046] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.664: mark_inode_dirty error [ 77.517659][ T5946] bridge_slave_1: entered allmulticast mode [ 77.523866][ T6046] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.664: corrupted inode contents [ 77.536776][ T5946] bridge_slave_1: entered promiscuous mode [ 77.542989][ T6046] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 77.572371][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.583751][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.617137][ T6046] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.664: corrupted inode contents [ 77.642705][ T5946] team0: Port device team_slave_0 added [ 77.665395][ T5946] team0: Port device team_slave_1 added [ 77.680723][ T6046] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.664: mark_inode_dirty error [ 77.701203][ T6079] EXT4-fs (loop7): 1 orphan inode deleted [ 77.706186][ T6080] EXT4-fs: Ignoring removed nobh option [ 77.721987][ T6046] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 77.732115][ T6079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.753016][ T6079] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.777012][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.784169][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.810253][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.825984][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.832524][ T6046] EXT4-fs (loop3): 1 truncate cleaned up [ 77.833683][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.840287][ T5560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.864993][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.894055][ T6046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.910181][ T6080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.919136][ T5946] hsr_slave_0: entered promiscuous mode [ 77.933685][ T6080] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.933949][ T5946] hsr_slave_1: entered promiscuous mode [ 77.953482][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 77.959345][ T5946] Cannot create hsr debugfs directory [ 78.001841][ T6097] capability: warning: `syz.2.674' uses 32-bit capabilities (legacy support in use) [ 78.047129][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.088669][ T6115] netlink: 824 bytes leftover after parsing attributes in process `syz.2.674'. [ 78.114036][ T6110] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 78.145067][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.230297][ T5946] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.232765][ T5946] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.235313][ T5946] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.237798][ T5946] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.289739][ T6136] set_capacity_and_notify: 17 callbacks suppressed [ 78.289762][ T6136] loop7: detected capacity change from 0 to 128 [ 78.330015][ T6136] msdos: Unknown parameter 'noAdots' [ 78.426008][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.451011][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.467853][ T1659] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.475091][ T1659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.516058][ T1659] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.523226][ T1659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.577104][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 78.672143][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.673907][ T6166] loop3: detected capacity change from 0 to 512 [ 78.710257][ T6166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.742928][ T6166] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.876615][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.920965][ T6186] loop3: detected capacity change from 0 to 512 [ 78.943826][ T5946] veth0_vlan: entered promiscuous mode [ 78.953126][ T6186] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 78.965990][ T5946] veth1_vlan: entered promiscuous mode [ 78.975228][ T6186] EXT4-fs (loop3): 1 truncate cleaned up [ 78.990966][ T6186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.004076][ T5946] veth0_macvtap: entered promiscuous mode [ 79.011771][ T5946] veth1_macvtap: entered promiscuous mode [ 79.032415][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.050455][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.069251][ T1659] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.081359][ T1659] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.105311][ T1659] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.124735][ T1659] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.137273][ T6186] /dev/loop3: Can't open blockdev [ 79.604254][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.661612][ T44] Bluetooth: hci0: sending frame failed (-49) [ 79.668027][ T3596] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 79.942541][ T6212] netlink: 'syz.3.690': attribute type 11 has an invalid length. [ 80.141307][ T6219] loop3: detected capacity change from 0 to 512 [ 80.148235][ T6219] /dev/loop3: Can't open blockdev [ 80.289320][ T6224] sock: sock_timestamping_bind_phc: sock not bind to device [ 80.312501][ T6224] loop3: detected capacity change from 0 to 512 [ 80.339702][ T6224] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.693: bad orphan inode 15 [ 80.353417][ T6224] ext4_test_bit(bit=14, block=5) = 0 [ 80.359206][ T6224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.388287][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.430257][ T6229] loop3: detected capacity change from 0 to 1024 [ 80.447243][ T6229] EXT4-fs: Ignoring removed nobh option [ 80.452951][ T6229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.499352][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.525834][ T6229] SET target dimension over the limit! [ 80.558280][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.593058][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.696'. [ 80.601988][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.696'. [ 80.640853][ T5278] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.659378][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.696'. [ 80.668302][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.696'. [ 80.677631][ T5278] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.700053][ T5278] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.712844][ T5278] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.767273][ T6247] loop8: detected capacity change from 0 to 512 [ 80.774443][ T6248] loop5: detected capacity change from 0 to 512 [ 80.777468][ T6247] EXT4-fs: Ignoring removed bh option [ 80.793363][ T6248] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 80.803317][ T6248] EXT4-fs (loop5): group descriptors corrupted! [ 80.823547][ T6247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.856749][ T6247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.899865][ T6247] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.948425][ T6247] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.699: iget: bad i_size value: 2533274857506816 [ 81.096021][ T6267] ip_vti0 speed is unknown, defaulting to 1000 [ 81.249394][ T6269] ip_vti0 speed is unknown, defaulting to 1000 [ 81.485625][ T6270] ip_vti0 speed is unknown, defaulting to 1000 [ 81.618788][ T5946] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 81.680492][ T5946] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 81.765826][ T6279] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.033216][ T6287] loop7: detected capacity change from 0 to 512 [ 82.053632][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 82.053650][ T29] audit: type=1400 audit(1769490319.274:1227): avc: denied { create } for pid=6286 comm="syz.7.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.079413][ T29] audit: type=1400 audit(1769490319.274:1228): avc: denied { create } for pid=6286 comm="syz.7.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.098793][ T29] audit: type=1400 audit(1769490319.274:1229): avc: denied { setopt } for pid=6286 comm="syz.7.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.118143][ T29] audit: type=1400 audit(1769490319.284:1230): avc: denied { ioctl } for pid=6286 comm="syz.7.710" path="socket:[16761]" dev="sockfs" ino=16761 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.146408][ T6287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.163443][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.712'. [ 82.172263][ T6291] netlink: 36 bytes leftover after parsing attributes in process `syz.5.712'. [ 82.173049][ T6287] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.212667][ T6287] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=2048, device loop7 blocksize: 2048 [ 82.250489][ T29] audit: type=1400 audit(1769490319.504:1231): avc: denied { read } for pid=6294 comm="syz.3.713" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.274012][ T29] audit: type=1400 audit(1769490319.504:1232): avc: denied { open } for pid=6294 comm="syz.3.713" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.297994][ T29] audit: type=1400 audit(1769490319.504:1233): avc: denied { ioctl } for pid=6294 comm="syz.3.713" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.324504][ T6287] grow_buffers: requested out-of-range block 144115188075855872 for device loop7 [ 82.333677][ T6287] EXT4-fs warning (device loop7): ext4_resize_fs:2019: can't read last block, resize aborted [ 82.359683][ T6300] loop5: detected capacity change from 0 to 512 [ 82.365899][ T29] audit: type=1400 audit(1769490319.574:1234): avc: denied { bind } for pid=6286 comm="syz.7.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.401885][ T6300] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.416330][ T5275] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.426711][ T5275] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.439391][ T5560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.473940][ T6300] EXT4-fs (loop5): 1 truncate cleaned up [ 82.492294][ T6300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.519444][ T6309] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 32768)! [ 82.529960][ T6309] EXT4-fs (loop7): group descriptors corrupted! [ 82.573378][ T29] audit: type=1400 audit(1769490319.814:1235): avc: denied { append } for pid=6295 comm="syz.5.714" path="/132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.619209][ T5275] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.629616][ T5275] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.640836][ T29] audit: type=1400 audit(1769490319.884:1236): avc: denied { map } for pid=6295 comm="syz.5.714" path="/132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.718458][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.720'. [ 82.730916][ T5275] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.741291][ T5275] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.763632][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.820926][ T5275] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.831284][ T5275] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.867898][ T6305] ip_vti0 speed is unknown, defaulting to 1000 [ 82.927757][ T6331] EXT4-fs: Ignoring removed nobh option [ 82.933771][ T6331] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 82.977590][ T6331] EXT4-fs (loop7): 1 truncate cleaned up [ 82.995681][ T6331] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.080645][ T5275] bridge_slave_1: left allmulticast mode [ 83.086476][ T5275] bridge_slave_1: left promiscuous mode [ 83.092195][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.153835][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.7.723'. [ 83.187356][ T5275] bridge_slave_0: left allmulticast mode [ 83.193049][ T5275] bridge_slave_0: left promiscuous mode [ 83.198844][ T5275] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.217549][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.257388][ T6339] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.294170][ T6354] program syz.5.727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.310370][ T5560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.379203][ T6361] set_capacity_and_notify: 3 callbacks suppressed [ 83.379219][ T6361] loop5: detected capacity change from 0 to 128 [ 83.392466][ T5275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.416461][ T5275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.426237][ T5275] bond0 (unregistering): Released all slaves [ 83.438532][ T6305] chnl_net:caif_netlink_parms(): no params data found [ 83.543940][ T6370] loop5: detected capacity change from 0 to 1024 [ 83.560156][ T5275] hsr_slave_0: left promiscuous mode [ 83.574487][ T5275] hsr_slave_1: left promiscuous mode [ 83.576435][ T6370] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 83.576435][ T6370] [ 83.580691][ T5275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.590592][ T6370] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 83.597988][ T5275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.614411][ T5275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.621832][ T5275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.638594][ T5275] veth1_macvtap: left promiscuous mode [ 83.644914][ T5275] veth0_macvtap: left promiscuous mode [ 83.650444][ T5275] veth1_vlan: left promiscuous mode [ 83.663329][ T5275] veth0_vlan: left promiscuous mode [ 83.819881][ T5275] team0 (unregistering): Port device team_slave_1 removed [ 83.831753][ T5275] team0 (unregistering): Port device team_slave_0 removed [ 83.960269][ T6339] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 83.974836][ T6339] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 83.986363][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.987299][ T6339] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.987299][ T6339] [ 84.002510][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.004048][ T6339] EXT4-fs (loop3): Total free blocks count 0 [ 84.017103][ T6339] EXT4-fs (loop3): Free/Dirty block details [ 84.023031][ T6339] EXT4-fs (loop3): free_blocks=65280 [ 84.028384][ T6339] EXT4-fs (loop3): dirty_blocks=6095 [ 84.033729][ T6339] EXT4-fs (loop3): Block reservation details [ 84.039751][ T6339] EXT4-fs (loop3): i_reserved_data_blocks=6095 [ 84.072514][ T5278] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 84.152263][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.164520][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.177451][ T6382] loop3: detected capacity change from 0 to 512 [ 84.190803][ T6382] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 84.200690][ T6382] EXT4-fs (loop3): group descriptors corrupted! [ 84.247491][ T5278] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.261737][ T6385] loop3: detected capacity change from 0 to 512 [ 84.265158][ T5278] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.279689][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.287333][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.296631][ T6305] bridge_slave_0: entered allmulticast mode [ 84.298658][ T6385] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.734: invalid indirect mapped block 256 (level 2) [ 84.304265][ T6305] bridge_slave_0: entered promiscuous mode [ 84.322740][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.329926][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.337206][ T6305] bridge_slave_1: entered allmulticast mode [ 84.343698][ T6305] bridge_slave_1: entered promiscuous mode [ 84.350911][ T5278] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.387412][ T1659] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.398278][ T6392] FAULT_INJECTION: forcing a failure. [ 84.398278][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.411481][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.7.736 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 84.411524][ T6392] Tainted: [W]=WARN [ 84.411534][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.411550][ T6392] Call Trace: [ 84.411559][ T6392] [ 84.411569][ T6392] __dump_stack+0x1d/0x30 [ 84.411634][ T6392] dump_stack_lvl+0x95/0xd0 [ 84.411664][ T6392] dump_stack+0x15/0x1b [ 84.411697][ T6392] should_fail_ex+0x263/0x280 [ 84.411740][ T6392] should_fail+0xb/0x20 [ 84.411861][ T6392] should_fail_usercopy+0x1a/0x20 [ 84.411903][ T6392] copy_folio_from_iter_atomic+0x269/0x1170 [ 84.411960][ T6392] ? shmem_write_begin+0xfc/0x1f0 [ 84.412050][ T6392] ? shmem_write_begin+0x135/0x1f0 [ 84.412091][ T6392] generic_perform_write+0x2c1/0x490 [ 84.412139][ T6392] shmem_file_write_iter+0xc5/0xf0 [ 84.412241][ T6392] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 84.412287][ T6392] vfs_write+0x5a6/0x9f0 [ 84.412321][ T6392] ksys_write+0xdc/0x1a0 [ 84.412422][ T6392] __x64_sys_write+0x40/0x50 [ 84.412448][ T6392] x64_sys_call+0x2847/0x3000 [ 84.412480][ T6392] do_syscall_64+0xc0/0x2a0 [ 84.412564][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.412593][ T6392] RIP: 0033:0x7f8f80dcb78e [ 84.412619][ T6392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.412643][ T6392] RSP: 002b:00007f8f7f866da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.412678][ T6392] RAX: ffffffffffffffda RBX: 00007f8f7f8676c0 RCX: 00007f8f80dcb78e [ 84.412774][ T6392] RDX: 0000000000040000 RSI: 00007f8f77447000 RDI: 0000000000000004 [ 84.412844][ T6392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.412861][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 84.412876][ T6392] R13: 00007f8f7f866ee0 R14: 00007f8f7f866ea0 R15: 00007f8f77447000 [ 84.412902][ T6392] [ 84.435001][ T6385] EXT4-fs (loop3): 2 truncates cleaned up [ 84.450729][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.494489][ T6385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.502224][ T6392] loop7: detected capacity change from 0 to 512 [ 84.649668][ T6400] loop5: detected capacity change from 0 to 512 [ 84.656805][ T6400] EXT4-fs: Ignoring removed i_version option [ 84.695096][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.715881][ T6400] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.718515][ T6409] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.734: bg 0: block 5: invalid block bitmap [ 84.741706][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.737'. [ 84.771073][ T6305] team0: Port device team_slave_0 added [ 84.795395][ T6305] team0: Port device team_slave_1 added [ 84.803884][ T3792] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 84.810479][ T6392] EXT4-fs (loop7): 1 orphan inode deleted [ 84.824566][ T6392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.836850][ T6409] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 84.849137][ T6409] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.849137][ T6409] [ 84.858839][ T6409] EXT4-fs (loop3): Total free blocks count 0 [ 84.864880][ T6409] EXT4-fs (loop3): Free/Dirty block details [ 84.870794][ T6409] EXT4-fs (loop3): free_blocks=0 [ 84.875830][ T6409] EXT4-fs (loop3): dirty_blocks=1164 [ 84.881151][ T6409] EXT4-fs (loop3): Block reservation details [ 84.887192][ T6409] EXT4-fs (loop3): i_reserved_data_blocks=1164 [ 84.896222][ T6392] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.911055][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.918052][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.944147][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.956041][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.738'. [ 84.979092][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.986109][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.012074][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.026293][ T1659] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 1160 with error 28 [ 85.084235][ T5560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.097553][ T6305] hsr_slave_0: entered promiscuous mode [ 85.111615][ T6305] hsr_slave_1: entered promiscuous mode [ 85.118040][ T6305] debugfs: 'hsr0' already exists in 'hsr' [ 85.123903][ T6305] Cannot create hsr debugfs directory [ 85.232557][ T6433] loop3: detected capacity change from 0 to 256 [ 85.242635][ T6435] loop5: detected capacity change from 0 to 512 [ 85.254026][ T6435] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 32767)! [ 85.264628][ T6435] EXT4-fs (loop5): group descriptors corrupted! [ 85.275779][ T6433] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.293509][ T6433] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.330158][ T6433] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.373628][ T6448] netlink: 'syz.5.747': attribute type 9 has an invalid length. [ 85.373628][ T6449] netlink: 'syz.5.747': attribute type 9 has an invalid length. [ 85.414259][ T6305] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 85.433025][ T6305] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 85.461746][ T6305] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 85.480361][ T6305] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 85.496104][ T6460] FAULT_INJECTION: forcing a failure. [ 85.496104][ T6460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 85.509559][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.3.750 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.509645][ T6460] Tainted: [W]=WARN [ 85.509655][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.509684][ T6460] Call Trace: [ 85.509692][ T6460] [ 85.509700][ T6460] __dump_stack+0x1d/0x30 [ 85.509731][ T6460] dump_stack_lvl+0x95/0xd0 [ 85.509763][ T6460] dump_stack+0x15/0x1b [ 85.509816][ T6460] should_fail_ex+0x263/0x280 [ 85.509855][ T6460] should_fail_alloc_page+0xf2/0x100 [ 85.509904][ T6460] __alloc_frozen_pages_noprof+0x108/0x350 [ 85.509946][ T6460] alloc_pages_mpol+0xb3/0x260 [ 85.509979][ T6460] folio_alloc_mpol_noprof+0x39/0x80 [ 85.510044][ T6460] shmem_get_folio_gfp+0x3da/0xd60 [ 85.510091][ T6460] shmem_write_begin+0xfc/0x1f0 [ 85.510133][ T6460] generic_perform_write+0x183/0x490 [ 85.510182][ T6460] shmem_file_write_iter+0xc5/0xf0 [ 85.510308][ T6460] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.510355][ T6460] vfs_write+0x5a6/0x9f0 [ 85.510389][ T6460] ksys_write+0xdc/0x1a0 [ 85.510418][ T6460] __x64_sys_write+0x40/0x50 [ 85.510490][ T6460] x64_sys_call+0x2847/0x3000 [ 85.510518][ T6460] do_syscall_64+0xc0/0x2a0 [ 85.510604][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.510632][ T6460] RIP: 0033:0x7f7c2d84b78e [ 85.510647][ T6460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.510667][ T6460] RSP: 002b:00007f7c2c2e6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.510689][ T6460] RAX: ffffffffffffffda RBX: 00007f7c2c2e76c0 RCX: 00007f7c2d84b78e [ 85.510709][ T6460] RDX: 0000000000040000 RSI: 00007f7c23ec7000 RDI: 0000000000000004 [ 85.510806][ T6460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.510825][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 85.510842][ T6460] R13: 00007f7c2c2e6ee0 R14: 00007f7c2c2e6ea0 R15: 00007f7c23ec7000 [ 85.510865][ T6460] [ 85.750120][ T6469] loop3: detected capacity change from 0 to 128 [ 85.765188][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.776805][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.793374][ T1659] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.800479][ T1659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.817357][ T6469] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.858143][ T1659] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.865264][ T1659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.900021][ T6469] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.012338][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.075111][ T6492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40208 sclass=netlink_route_socket pid=6492 comm=syz.7.754 [ 86.215696][ T6513] loop3: detected capacity change from 0 to 512 [ 86.224589][ T6513] ext4: Unknown parameter 'measure' [ 86.319902][ T6521] EXT4-fs (loop5): too many log groups per flexible block group [ 86.331502][ T6530] netlink: 48 bytes leftover after parsing attributes in process `syz.7.760'. [ 86.386859][ T6521] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 86.407560][ T6521] EXT4-fs (loop5): mount failed [ 86.453890][ T6305] veth0_vlan: entered promiscuous mode [ 86.465326][ T6305] veth1_vlan: entered promiscuous mode [ 86.484951][ T6305] veth0_macvtap: entered promiscuous mode [ 86.493032][ T6305] veth1_macvtap: entered promiscuous mode [ 86.507348][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.522102][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.533925][ T5279] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.559264][ T5279] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.572446][ T5275] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.602031][ T5275] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.649210][ T6548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.662179][ T6548] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.843698][ T6567] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 86.848779][ T6566] IPVS: stopping backup sync thread 6567 ... [ 86.880621][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.920923][ T6569] 9p: Could not find request transport: f [ 86.963828][ T6569] 9p: Could not find request transport: f [ 87.181337][ T6585] EXT4-fs (loop7): too many log groups per flexible block group [ 87.191929][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 87.191946][ T29] audit: type=1326 audit(1769490324.444:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2d88aeb9 code=0x7ffc0000 [ 87.201053][ T6585] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 87.222759][ T29] audit: type=1326 audit(1769490324.444:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2d88aeb9 code=0x7ffc0000 [ 87.252188][ T29] audit: type=1326 audit(1769490324.444:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c2d88aeb9 code=0x7ffc0000 [ 87.273992][ T6590] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.275663][ T29] audit: type=1326 audit(1769490324.444:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2d88aeb9 code=0x7ffc0000 [ 87.284573][ T6590] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 87.307786][ T29] audit: type=1326 audit(1769490324.444:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2d88aeb9 code=0x7ffc0000 [ 87.339331][ T29] audit: type=1326 audit(1769490324.444:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2d88aeb9 code=0x7ffc0000 [ 87.362680][ T29] audit: type=1326 audit(1769490324.454:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7c2d88aeb9 code=0x7ffc0000 [ 87.368323][ T6585] EXT4-fs (loop7): mount failed [ 87.386036][ T29] audit: type=1326 audit(1769490324.454:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c2d88ac22 code=0x7ffc0000 [ 87.418214][ T29] audit: type=1326 audit(1769490324.484:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c2d84b78e code=0x7ffc0000 [ 87.441565][ T29] audit: type=1326 audit(1769490324.484:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7c2d88ace7 code=0x7ffc0000 [ 87.467343][ T6590] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 87.507978][ T6590] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 87.534586][ T6590] System zones: 0-2, 18-18, 34-35 [ 87.780269][ T6615] netlink: 36 bytes leftover after parsing attributes in process `syz.9.781'. [ 87.918524][ T6629] EXT4-fs (loop3): too many log groups per flexible block group [ 87.932485][ T6629] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 87.939709][ T6629] EXT4-fs (loop3): mount failed [ 88.040801][ T6627] EXT4-fs (loop9): 1 orphan inode deleted [ 88.050652][ T6627] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.274227][ T6652] ip_vti0 speed is unknown, defaulting to 1000 [ 88.356792][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.765'. [ 88.367783][ T6546] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.382501][ T6546] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.410854][ T6546] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.518839][ T6664] FAULT_INJECTION: forcing a failure. [ 88.518839][ T6664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.532115][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.7.796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.532210][ T6664] Tainted: [W]=WARN [ 88.532220][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.532237][ T6664] Call Trace: [ 88.532245][ T6664] [ 88.532253][ T6664] __dump_stack+0x1d/0x30 [ 88.532284][ T6664] dump_stack_lvl+0x95/0xd0 [ 88.532386][ T6664] dump_stack+0x15/0x1b [ 88.532405][ T6664] should_fail_ex+0x263/0x280 [ 88.532510][ T6664] should_fail+0xb/0x20 [ 88.532553][ T6664] should_fail_usercopy+0x1a/0x20 [ 88.532597][ T6664] copy_folio_from_iter_atomic+0x269/0x1170 [ 88.532649][ T6664] ? shmem_write_begin+0xfc/0x1f0 [ 88.532681][ T6664] ? shmem_write_begin+0x135/0x1f0 [ 88.532808][ T6664] generic_perform_write+0x2c1/0x490 [ 88.532895][ T6664] shmem_file_write_iter+0xc5/0xf0 [ 88.532968][ T6664] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 88.533073][ T6664] vfs_write+0x5a6/0x9f0 [ 88.533099][ T6664] ksys_write+0xdc/0x1a0 [ 88.533125][ T6664] __x64_sys_write+0x40/0x50 [ 88.533149][ T6664] x64_sys_call+0x2847/0x3000 [ 88.533191][ T6664] do_syscall_64+0xc0/0x2a0 [ 88.533283][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.533312][ T6664] RIP: 0033:0x7f8f80dcb78e [ 88.533332][ T6664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.533417][ T6664] RSP: 002b:00007f8f7f866da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.533459][ T6664] RAX: ffffffffffffffda RBX: 00007f8f7f8676c0 RCX: 00007f8f80dcb78e [ 88.533517][ T6664] RDX: 0000000000040000 RSI: 00007f8f77447000 RDI: 0000000000000004 [ 88.533531][ T6664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.533543][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 88.533555][ T6664] R13: 00007f8f7f866ee0 R14: 00007f8f7f866ea0 R15: 00007f8f77447000 [ 88.533629][ T6664] [ 88.738652][ T6664] set_capacity_and_notify: 8 callbacks suppressed [ 88.738669][ T6664] loop7: detected capacity change from 0 to 512 [ 88.763659][ T6665] netlink: 84 bytes leftover after parsing attributes in process `syz.9.794'. [ 88.790234][ T6652] loop3: detected capacity change from 0 to 128 [ 88.799379][ T6652] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.811212][ T6664] EXT4-fs (loop7): 1 orphan inode deleted [ 88.820148][ T6664] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.910896][ T6680] loop7: detected capacity change from 0 to 512 [ 88.951307][ T6679] netlink: 'syz.5.799': attribute type 21 has an invalid length. [ 88.961511][ T6679] netlink: 132 bytes leftover after parsing attributes in process `syz.5.799'. [ 88.974791][ T6680] EXT4-fs (loop7): too many log groups per flexible block group [ 88.990531][ T6680] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 88.997995][ T6680] EXT4-fs (loop7): mount failed [ 89.098637][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.802'. [ 89.114143][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.802'. [ 89.144658][ T6701] loop5: detected capacity change from 0 to 512 [ 89.151380][ T6701] EXT4-fs: Ignoring removed nobh option [ 89.191219][ T6701] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.291939][ T6715] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 89.328909][ T6703] loop9: detected capacity change from 0 to 512 [ 89.393682][ T6718] loop3: detected capacity change from 0 to 512 [ 89.411936][ T6715] loop7: detected capacity change from 0 to 8192 [ 89.421402][ T6715] vfat: Unknown parameter 'system_u:object_r:ssh_exec_t:s0' [ 89.437910][ T6703] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.473697][ T6720] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.805: path /154/bus: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 89.557363][ T6723] ip_vti0 speed is unknown, defaulting to 1000 [ 89.628862][ T6726] pimreg: entered allmulticast mode [ 89.647156][ T6726] pimreg: left allmulticast mode [ 89.703235][ T6732] loop7: detected capacity change from 0 to 512 [ 89.714874][ T6732] EXT4-fs (loop7): too many log groups per flexible block group [ 89.722774][ T6732] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 89.729826][ T6732] EXT4-fs (loop7): mount failed [ 89.924848][ T6743] loop3: detected capacity change from 0 to 1024 [ 89.949917][ T6743] ext4: Invalid uid '0x00000000ffffffff' [ 90.096159][ T6750] loop7: detected capacity change from 0 to 512 [ 90.119989][ T6750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.155067][ T6750] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.819: invalid indirect mapped block 4294967295 (level 1) [ 90.251692][ T6750] EXT4-fs (loop7): Remounting filesystem read-only [ 90.276161][ T6750] EXT4-fs (loop7): 2 truncates cleaned up [ 90.303614][ T6766] netlink: 'syz.9.823': attribute type 8 has an invalid length. [ 90.303646][ T6770] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.307326][ T6770] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.340724][ T6770] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.401985][ T6778] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.443621][ T6778] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 90.450686][ T6784] netlink: 'syz.7.826': attribute type 3 has an invalid length. [ 90.477217][ T6778] EXT4-fs error (device loop9): __ext4_fill_super:5553: inode #2: comm syz.9.825: casefold flag without casefold feature [ 90.559241][ T6778] EXT4-fs (loop9): get root inode failed [ 90.565105][ T6778] EXT4-fs (loop9): mount failed [ 90.739862][ T6805] EXT4-fs (loop5): too many log groups per flexible block group [ 90.753287][ T6805] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 90.760445][ T6805] EXT4-fs (loop5): mount failed [ 90.807346][ T6818] EXT4-fs (loop9): 1 orphan inode deleted [ 90.813877][ T6818] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.898162][ T6834] netlink: 'syz.5.838': attribute type 21 has an invalid length. [ 90.910097][ T6834] netlink: 132 bytes leftover after parsing attributes in process `syz.5.838'. [ 90.938366][ T6834] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.949257][ T6834] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.960125][ T6834] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.028239][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 91.037245][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 91.056282][ T419] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.064772][ T419] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.079472][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 91.088459][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 91.096335][ T6848] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 91.100361][ T419] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.115470][ T419] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.159389][ T6853] syz.3.847: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 91.174057][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.3.847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.174101][ T6853] Tainted: [W]=WARN [ 91.174120][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.174136][ T6853] Call Trace: [ 91.174142][ T6853] [ 91.174149][ T6853] __dump_stack+0x1d/0x30 [ 91.174175][ T6853] dump_stack_lvl+0x95/0xd0 [ 91.174197][ T6853] dump_stack+0x15/0x1b [ 91.174290][ T6853] warn_alloc+0x145/0x1c0 [ 91.174386][ T6853] ? __cgroup_account_cputime+0x81/0xa0 [ 91.174457][ T6853] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 91.174545][ T6853] ? update_curr+0x9c/0x150 [ 91.174570][ T6853] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 91.174607][ T6853] ? probe_sched_wakeup+0x84/0xa0 [ 91.174633][ T6853] ? __rcu_read_unlock+0x4e/0x70 [ 91.174738][ T6853] ? avc_has_perm_noaudit+0xab/0x130 [ 91.174782][ T6853] ? should_fail_ex+0x30/0x280 [ 91.174898][ T6853] ? should_failslab+0x8c/0xb0 [ 91.174958][ T6853] vmalloc_user_noprof+0x7d/0xb0 [ 91.174994][ T6853] ? xskq_create+0x80/0xe0 [ 91.175061][ T6853] xskq_create+0x80/0xe0 [ 91.175104][ T6853] xsk_init_queue+0x91/0xe0 [ 91.175147][ T6853] xsk_setsockopt+0x3f5/0x640 [ 91.175200][ T6853] ? __pfx_xsk_setsockopt+0x10/0x10 [ 91.175316][ T6853] __sys_setsockopt+0x184/0x200 [ 91.175362][ T6853] __x64_sys_setsockopt+0x64/0x80 [ 91.175442][ T6853] x64_sys_call+0x21d5/0x3000 [ 91.175492][ T6853] do_syscall_64+0xc0/0x2a0 [ 91.175586][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.175672][ T6853] RIP: 0033:0x7f7c2d88aeb9 [ 91.175691][ T6853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.175713][ T6853] RSP: 002b:00007f7c2c2e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.175735][ T6853] RAX: ffffffffffffffda RBX: 00007f7c2db05fa0 RCX: 00007f7c2d88aeb9 [ 91.175750][ T6853] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 91.175763][ T6853] RBP: 00007f7c2d8f8c1f R08: 0000000000000004 R09: 0000000000000000 [ 91.175813][ T6853] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.175831][ T6853] R13: 00007f7c2db06038 R14: 00007f7c2db05fa0 R15: 00007fff76619f88 [ 91.175860][ T6853] [ 91.175879][ T6853] Mem-Info: [ 91.284615][ T6856] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 91.286740][ T6853] active_anon:9341 inactive_anon:95 isolated_anon:0 [ 91.286740][ T6853] active_file:21505 inactive_file:5133 isolated_file:0 [ 91.286740][ T6853] unevictable:0 dirty:38 writeback:0 [ 91.286740][ T6853] slab_reclaimable:3758 slab_unreclaimable:18582 [ 91.286740][ T6853] mapped:29388 shmem:467 pagetables:1761 [ 91.286740][ T6853] sec_pagetables:0 bounce:0 [ 91.286740][ T6853] kernel_misc_reclaimable:0 [ 91.286740][ T6853] free:1862317 free_pcp:20831 free_cma:0 [ 91.326594][ T6858] ip_vti0 speed is unknown, defaulting to 1000 [ 91.330813][ T6853] Node 0 active_anon:37364kB inactive_anon:380kB active_file:86020kB inactive_file:20532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117552kB dirty:152kB writeback:0kB shmem:1984kB kernel_stack:4432kB pagetables:7044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.490585][ T6853] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.520455][ T6853] lowmem_reserve[]: 0 2879 7858 7858 [ 91.525891][ T6853] Node 0 DMA32 free:2944856kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948384kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 91.557023][ T6853] lowmem_reserve[]: 0 0 4978 4978 [ 91.562157][ T6853] Node 0 Normal free:4488540kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39104kB inactive_anon:380kB active_file:86020kB inactive_file:20532kB unevictable:0kB writepending:152kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:77644kB local_pcp:56736kB free_cma:0kB [ 91.595667][ T6853] lowmem_reserve[]: 0 0 0 0 [ 91.600258][ T6853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 91.613147][ T6853] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944856kB [ 91.629405][ T6853] Node 0 Normal: 1729*4kB (UM) 1337*8kB (UM) 630*16kB (UM) 380*32kB (M) 197*64kB (UM) 126*128kB (UME) 85*256kB (UM) 84*512kB (UME) 55*1024kB (UME) 39*2048kB (UME) 1030*4096kB (UM) = 4488428kB [ 91.648605][ T6853] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 91.657965][ T6853] 27651 total pagecache pages [ 91.662665][ T6853] 3 pages in swap cache [ 91.666935][ T6853] Free swap = 124984kB [ 91.671110][ T6853] Total swap = 124996kB [ 91.675405][ T6853] 2097051 pages RAM [ 91.679319][ T6853] 0 pages HighMem/MovableOnly [ 91.684045][ T6853] 81555 pages reserved [ 91.853382][ T6853] dvmrp1: entered allmulticast mode [ 92.081695][ T6911] netlink: 'syz.7.855': attribute type 1 has an invalid length. [ 92.095494][ T3409] IPVS: starting estimator thread 0... [ 92.204066][ T6913] IPVS: using max 1584 ests per chain, 79200 per kthread [ 92.223072][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 92.223090][ T29] audit: type=1326 audit(1769490329.474:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.3.857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2d88aeb9 code=0x0 [ 92.314339][ T6923] ------------[ cut here ]------------ [ 92.319873][ T6923] EA inode 11 i_nlink=2 [ 92.319891][ T6923] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.857/6923 [ 92.333999][ T6922] EXT4-fs (loop7): too many log groups per flexible block group [ 92.335133][ T6923] Modules linked in: [ 92.343027][ T6922] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 92.346676][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.3.857 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.354511][ T6922] EXT4-fs (loop7): mount failed [ 92.364749][ T6923] Tainted: [W]=WARN [ 92.364760][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.383597][ T6923] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 92.390303][ T6923] Code: c4 e7 9a ff 4c 8d 2d 5d 22 3e 05 49 8d 7e 40 e8 d4 d1 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 cd b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f d3 d0 03 66 66 66 66 66 66 2e [ 92.410046][ T6923] RSP: 0018:ffffc90005a27778 EFLAGS: 00010246 [ 92.416225][ T6923] RAX: ffff88810ffccc90 RBX: ffff88811a4e01a8 RCX: ffffffff81be1808 [ 92.424268][ T6923] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3a50 [ 92.432269][ T6923] RBP: 000000000000000b R08: 000188811a4e015b R09: 0000000000000000 [ 92.440351][ T6923] R10: 0001888237c26468 R11: 0000000000000001 R12: ffff88811a4e0158 [ 92.448446][ T6923] R13: ffffffff86fc3a50 R14: ffff88811a4e0110 R15: 0000000000000001 [ 92.456678][ T6923] FS: 00007f7c2c2c66c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 92.465734][ T6923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.472384][ T6923] CR2: 00007f2fb6790000 CR3: 0000000105290000 CR4: 00000000003506f0 [ 92.480414][ T6923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.488422][ T6923] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 92.496625][ T6923] Call Trace: [ 92.499989][ T6923] [ 92.502926][ T6923] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 92.508932][ T6923] ? errseq_check+0x2c/0x50 [ 92.513607][ T6923] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 92.519115][ T6923] ? ext4_truncate+0x92b/0xad0 [ 92.523945][ T6923] ext4_evict_inode+0xa1f/0xd40 [ 92.528849][ T6923] ? __pfx_ext4_evict_inode+0x10/0x10 [ 92.534328][ T6923] evict+0x2af/0x510 [ 92.538338][ T6923] ? __dquot_initialize+0x146/0x7c0 [ 92.543620][ T6923] iput+0x4b9/0x650 [ 92.547493][ T6923] ext4_process_orphan+0x1a9/0x1c0 [ 92.552633][ T6923] ext4_orphan_cleanup+0x6a8/0xa00 [ 92.557840][ T6923] ext4_fill_super+0x3476/0x3800 [ 92.562812][ T6923] ? set_blocksize+0x1a3/0x310 [ 92.567655][ T6923] ? setup_bdev_super+0x30e/0x370 [ 92.572719][ T6923] ? __pfx_ext4_fill_super+0x10/0x10 [ 92.578046][ T6923] get_tree_bdev_flags+0x291/0x300 [ 92.583219][ T6923] ? __pfx_ext4_fill_super+0x10/0x10 [ 92.588559][ T6923] get_tree_bdev+0x1f/0x30 [ 92.593010][ T6923] ext4_get_tree+0x1c/0x30 [ 92.597552][ T6923] vfs_get_tree+0x57/0x1d0 [ 92.602089][ T6923] do_new_mount+0x288/0x700 [ 92.606883][ T6923] path_mount+0x4d0/0xbc0 [ 92.611261][ T6923] ? user_path_at+0xbf/0x130 [ 92.616172][ T6923] __se_sys_mount+0x28c/0x2e0 [ 92.620955][ T6923] __x64_sys_mount+0x67/0x80 [ 92.625642][ T6923] x64_sys_call+0x2cca/0x3000 [ 92.630564][ T6923] do_syscall_64+0xc0/0x2a0 [ 92.635150][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.641099][ T6923] RIP: 0033:0x7f7c2d88c14a [ 92.645643][ T6923] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.665320][ T6923] RSP: 002b:00007f7c2c2c5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.673821][ T6923] RAX: ffffffffffffffda RBX: 00007f7c2c2c5ee0 RCX: 00007f7c2d88c14a [ 92.681987][ T6923] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007f7c2c2c5ea0 [ 92.690100][ T6923] RBP: 0000200000000180 R08: 00007f7c2c2c5ee0 R09: 0000000000800700 [ 92.698278][ T6923] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240 [ 92.706312][ T6923] R13: 00007f7c2c2c5ea0 R14: 000000000000046f R15: 000000000000002c [ 92.714430][ T6923] [ 92.717516][ T6923] ---[ end trace 0000000000000000 ]--- [ 92.725064][ T6923] EXT4-fs (loop3): 1 orphan inode deleted [ 92.838721][ T29] audit: type=1400 audit(1769490330.094:1639): avc: denied { accept } for pid=6933 comm="syz.5.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.846228][ T6940] program syz.9.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.868741][ T29] audit: type=1400 audit(1769490330.094:1640): avc: denied { append } for pid=6939 comm="syz.9.864" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 92.912241][ T37] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.921387][ T37] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.940666][ T37] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.951021][ T37] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.974904][ T29] audit: type=1400 audit(1769490330.214:1641): avc: denied { read write } for pid=6944 comm="syz.9.866" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.998474][ T29] audit: type=1400 audit(1769490330.214:1642): avc: denied { open } for pid=6944 comm="syz.9.866" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.051050][ T6950] syz_tun: entered allmulticast mode [ 93.066583][ T6952] vfat: Unknown parameter 'mutMj'TXa&˒#Fh [ 93.066583][ T6952] ܋104A [ 93.066583][ T6952] 170tv' [ 93.080856][ T29] audit: type=1400 audit(1769490330.324:1643): avc: denied { watch watch_reads } for pid=6951 comm="syz.5.870" path="/169" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.107267][ T6949] syz_tun: left allmulticast mode [ 93.124370][ T29] audit: type=1400 audit(1769490330.374:1644): avc: denied { setopt } for pid=6951 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 93.207779][ T29] audit: type=1400 audit(1769490330.464:1645): avc: denied { mount } for pid=6953 comm="syz.9.868" name="/" dev="rpc_pipefs" ino=19610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 93.287855][ T6969] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.538570][ T6977] EXT4-fs (loop7): 1 orphan inode deleted [ 93.546854][ T6977] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.165583][ T6996] set_capacity_and_notify: 12 callbacks suppressed [ 94.165607][ T6996] loop9: detected capacity change from 0 to 128 [ 94.217957][ T6996] syz.9.881: attempt to access beyond end of device [ 94.217957][ T6996] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 94.313473][ T7002] syz.9.881: attempt to access beyond end of device [ 94.313473][ T7002] loop9: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 94.451817][ T7008] __nla_validate_parse: 12 callbacks suppressed [ 94.451915][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 94.453942][ T6996] syz.9.881: attempt to access beyond end of device [ 94.453942][ T6996] loop9: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 94.480834][ T6996] Buffer I/O error on dev loop9, logical block 69, async page read [ 94.493099][ T6996] syz.9.881: attempt to access beyond end of device [ 94.493099][ T6996] loop9: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 94.506881][ T6996] Buffer I/O error on dev loop9, logical block 70, async page read [ 94.530194][ T29] audit: type=1400 audit(1769490331.784:1646): avc: denied { read } for pid=7011 comm="syz.5.885" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.543718][ T6996] syz.9.881: attempt to access beyond end of device [ 94.543718][ T6996] loop9: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 94.564048][ T6996] Buffer I/O error on dev loop9, logical block 71, async page read [ 94.591560][ T6996] syz.9.881: attempt to access beyond end of device [ 94.591560][ T6996] loop9: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 94.605405][ T6996] Buffer I/O error on dev loop9, logical block 72, async page read [ 94.616330][ T6995] syz.9.881: attempt to access beyond end of device [ 94.616330][ T6995] loop9: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 94.629976][ T6995] Buffer I/O error on dev loop9, logical block 69, async page read [ 94.643049][ T6995] syz.9.881: attempt to access beyond end of device [ 94.643049][ T6995] loop9: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 94.656812][ T6995] Buffer I/O error on dev loop9, logical block 70, async page read [ 94.675948][ T6995] syz.9.881: attempt to access beyond end of device [ 94.675948][ T6995] loop9: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 94.689780][ T6995] Buffer I/O error on dev loop9, logical block 71, async page read [ 94.699250][ T6995] syz.9.881: attempt to access beyond end of device [ 94.699250][ T6995] loop9: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 94.712936][ T6995] Buffer I/O error on dev loop9, logical block 72, async page read [ 94.724301][ T6996] Buffer I/O error on dev loop9, logical block 69, async page read [ 94.758141][ T7024] loop7: detected capacity change from 0 to 764 [ 94.765942][ T7024] rock: directory entry would overflow storage [ 94.772153][ T7024] rock: sig=0x5245, size=8, remaining=5 [ 94.798892][ T6996] Buffer I/O error on dev loop9, logical block 70, async page read [ 94.825196][ T7027] loop3: detected capacity change from 0 to 512 [ 94.845843][ T7027] EXT4-fs (loop3): too many log groups per flexible block group [ 94.866814][ T7007] ip_vti0 speed is unknown, defaulting to 1000 [ 94.896440][ T7027] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 94.932964][ T7027] EXT4-fs (loop3): mount failed [ 95.060000][ T7007] chnl_net:caif_netlink_parms(): no params data found [ 95.148887][ T7041] IPVS: stopping backup sync thread 7045 ... [ 95.171803][ T7049] netlink: 256 bytes leftover after parsing attributes in process `syz.9.894'. [ 95.292129][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.299483][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.306832][ T7007] bridge_slave_0: entered allmulticast mode [ 95.309814][ T7051] loop3: detected capacity change from 0 to 164 [ 95.314436][ T7007] bridge_slave_0: entered promiscuous mode [ 95.329813][ T7051] iso9660: Unknown parameter 'dont_appraise' [ 95.334825][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.342902][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.360535][ T7007] bridge_slave_1: entered allmulticast mode [ 95.396746][ T7007] bridge_slave_1: entered promiscuous mode [ 95.417689][ T7051] syzkaller1: entered promiscuous mode [ 95.423272][ T7051] syzkaller1: entered allmulticast mode [ 95.472782][ T7061] loop7: detected capacity change from 0 to 128 [ 95.501977][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.511597][ T7061] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.529729][ T7061] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.555909][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.9.899'. [ 95.558324][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.583243][ T37] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.596009][ T7073] loop5: detected capacity change from 0 to 512 [ 95.615976][ T29] audit: type=1400 audit(1769490332.874:1647): avc: denied { bind } for pid=7074 comm="syz.7.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.658095][ T7075] tipc: Started in network mode [ 95.663080][ T7075] tipc: Node identity 3ee9194fa6cd, cluster identity 4711 [ 95.670372][ T7075] tipc: Enabled bearer , priority 0 [ 95.678994][ T7007] team0: Port device team_slave_0 added [ 95.702581][ T7073] EXT4-fs (loop5): too many log groups per flexible block group [ 95.713923][ T7073] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 95.720832][ T7073] EXT4-fs (loop5): mount failed [ 95.731116][ T7007] team0: Port device team_slave_1 added [ 95.739507][ T7075] syzkaller0: entered promiscuous mode [ 95.745087][ T7075] syzkaller0: entered allmulticast mode [ 95.787669][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.794802][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.820974][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.845163][ T7083] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 95.845193][ T7082] IPVS: stopping backup sync thread 7083 ... [ 95.861630][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.868677][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.894858][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.921307][ T7074] tipc: Resetting bearer [ 95.938935][ T7085] loop9: detected capacity change from 0 to 736 [ 95.956469][ T7074] tipc: Disabling bearer [ 95.991581][ T7007] hsr_slave_0: entered promiscuous mode [ 95.998954][ T7007] hsr_slave_1: entered promiscuous mode [ 96.013502][ T7007] debugfs: 'hsr0' already exists in 'hsr' [ 96.019391][ T7007] Cannot create hsr debugfs directory [ 96.062092][ T7091] netlink: 'syz.7.908': attribute type 29 has an invalid length. [ 96.071707][ T7091] netlink: 'syz.7.908': attribute type 29 has an invalid length. [ 96.125067][ T7098] loop5: detected capacity change from 0 to 764 [ 96.143071][ T7101] mmap: syz.7.908 (7101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.160787][ T7098] rock: directory entry would overflow storage [ 96.167106][ T7098] rock: sig=0x5245, size=8, remaining=5 [ 96.201382][ T7100] ip_vti0 speed is unknown, defaulting to 1000 [ 96.208473][ T7101] netlink: 348 bytes leftover after parsing attributes in process `syz.7.908'. [ 96.217629][ T7101] unsupported nla_type 58 [ 96.236705][ T7106] loop5: detected capacity change from 0 to 512 [ 96.379002][ T7108] ip_vti0 speed is unknown, defaulting to 1000 [ 96.538375][ T7135] IPVS: stopping backup sync thread 7143 ... [ 96.568545][ T7007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.577842][ T7007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.613305][ T7007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.640494][ T7154] loop9: detected capacity change from 0 to 512 [ 96.648984][ T7154] EXT4-fs: inline encryption not supported [ 96.652836][ T7007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.663756][ T7154] ext4: Unknown parameter 'fsuuid' [ 96.759350][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.787224][ T7007] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.817213][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.824425][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.858173][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.865424][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.932776][ T7181] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.969190][ T7186] EXT4-fs: dax option not supported [ 97.052926][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.064405][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.075089][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.154947][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.929'. [ 97.165223][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.929'. [ 97.282547][ T7219] syzkaller0: entered promiscuous mode [ 97.288145][ T7219] syzkaller0: entered allmulticast mode [ 97.372836][ T7007] veth0_vlan: entered promiscuous mode [ 97.386244][ T7007] veth1_vlan: entered promiscuous mode [ 97.426810][ T7007] veth0_macvtap: entered promiscuous mode [ 97.429127][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.9.935'. [ 97.442400][ T7007] veth1_macvtap: entered promiscuous mode [ 97.460054][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.488716][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.506014][ T7238] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 97.518177][ T7238] macvlan2: entered promiscuous mode [ 97.523553][ T7238] macvlan2: entered allmulticast mode [ 97.529281][ T7238] bond1: entered promiscuous mode [ 97.534626][ T7238] bridge2: entered promiscuous mode [ 97.540346][ T7238] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.548333][ T7238] bond1: left promiscuous mode [ 97.553222][ T7238] bridge2: left promiscuous mode [ 97.571407][ T5278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.609218][ T5278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.657886][ T5278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675089][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 97.675104][ T29] audit: type=1400 audit(1769490334.904:1651): avc: denied { setopt } for pid=7243 comm="syz.9.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.690657][ T5278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.701228][ T29] audit: type=1400 audit(1769490334.914:1652): avc: denied { bind } for pid=7243 comm="syz.9.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.761365][ T7252] rock: directory entry would overflow storage [ 97.767795][ T7252] rock: sig=0x5245, size=8, remaining=5 [ 97.858076][ T29] audit: type=1400 audit(1769490335.114:1653): avc: denied { write } for pid=7263 comm="syz.9.939" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.895925][ T7262] ip_vti0 speed is unknown, defaulting to 1000 [ 98.022752][ T7276] netlink: 76 bytes leftover after parsing attributes in process `syz.7.943'. [ 98.033839][ T7271] EXT4-fs: Invalid want_extra_isize 32767 [ 98.079506][ T5275] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.089415][ T5275] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.143956][ T29] audit: type=1400 audit(1769490335.404:1654): avc: denied { read write } for pid=7281 comm="syz.4.946" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.167499][ T29] audit: type=1400 audit(1769490335.404:1655): avc: denied { open } for pid=7281 comm="syz.4.946" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.193924][ T3409] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 98.224419][ T3409] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 98.255195][ T5275] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.265071][ T5275] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.329877][ T7299] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 98.340115][ T7294] rock: directory entry would overflow storage [ 98.346388][ T7294] rock: sig=0x5245, size=8, remaining=5 [ 98.348603][ T29] audit: type=1400 audit(1769490335.594:1656): avc: denied { relabelto } for pid=7297 comm="syz.4.950" name="3" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 98.378994][ T29] audit: type=1400 audit(1769490335.594:1657): avc: denied { associate } for pid=7297 comm="syz.4.950" name="3" dev="tmpfs" ino=28 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 98.411161][ T7287] fido_id[7287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.495663][ T5275] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.505873][ T5275] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.560215][ T29] audit: type=1400 audit(1769490335.814:1658): avc: denied { setopt } for pid=7314 comm="syz.9.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.653600][ T7326] netlink: 'syz.7.953': attribute type 1 has an invalid length. [ 98.685617][ T5275] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.695543][ T5275] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.727997][ T29] audit: type=1400 audit(1769490335.974:1659): avc: denied { remove_name } for pid=7007 comm="syz-executor" name="binderfs" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 98.755746][ T29] audit: type=1400 audit(1769490335.984:1660): avc: denied { rmdir } for pid=7007 comm="syz-executor" name="3" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 98.813700][ T7292] ip_vti0 speed is unknown, defaulting to 1000 [ 98.864495][ T7329] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.883454][ T7340] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 98.896218][ T7340] msdos: Bad value for 'gid' [ 98.900884][ T7340] msdos: Bad value for 'gid' [ 98.961639][ T5275] bridge_slave_1: left allmulticast mode [ 98.967362][ T5275] bridge_slave_1: left promiscuous mode [ 98.973042][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.989046][ T5275] bridge_slave_0: left allmulticast mode [ 98.994864][ T5275] bridge_slave_0: left promiscuous mode [ 99.000599][ T5275] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.157417][ T7363] rock: directory entry would overflow storage [ 99.163806][ T7363] rock: sig=0x5245, size=8, remaining=5 [ 99.197842][ T5275] dvmrp1 (unregistering): left allmulticast mode [ 99.266625][ T5275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.277635][ T5275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.287690][ T5275] bond0 (unregistering): Released all slaves [ 99.301305][ T7372] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 99.301386][ T7348] IPVS: stopping backup sync thread 7372 ... [ 99.342947][ T5275] tipc: Left network mode [ 99.511276][ T5275] hsr_slave_0: left promiscuous mode [ 99.533296][ T5275] hsr_slave_1: left promiscuous mode [ 99.541448][ T5275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.548947][ T5275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.557769][ T5275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.565308][ T5275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.599737][ T5275] veth1_macvtap: left allmulticast mode [ 99.605646][ T5275] veth1_macvtap: left promiscuous mode [ 99.622451][ T5275] veth0_macvtap: left promiscuous mode [ 99.631543][ T5275] veth1_vlan: left promiscuous mode [ 99.641206][ T5275] veth0_vlan: left promiscuous mode [ 99.752752][ T7417] set_capacity_and_notify: 9 callbacks suppressed [ 99.752771][ T7417] loop5: detected capacity change from 0 to 512 [ 99.790304][ T7421] loop9: detected capacity change from 0 to 764 [ 99.834577][ T7417] EXT4-fs (loop5): too many log groups per flexible block group [ 99.857493][ T7417] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 99.864263][ T7421] rock: directory entry would overflow storage [ 99.864340][ T7421] rock: sig=0x5245, size=8, remaining=5 [ 99.886630][ T7429] loop4: detected capacity change from 0 to 512 [ 99.892749][ T7417] EXT4-fs (loop5): mount failed [ 99.915009][ T7429] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.967853][ T7429] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.972: corrupted inode contents [ 99.984452][ T7429] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.972: mark_inode_dirty error [ 100.016540][ T7429] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.972: corrupted inode contents [ 100.030816][ T5275] team0 (unregistering): Port device team_slave_1 removed [ 100.044517][ T5275] team0 (unregistering): Port device team_slave_0 removed [ 100.051780][ T7429] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.972: mark_inode_dirty error [ 100.216670][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.978'. [ 100.265544][ T7457] ip_vti0 speed is unknown, defaulting to 1000 [ 100.274624][ T7292] chnl_net:caif_netlink_parms(): no params data found [ 100.376793][ T7292] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.383925][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.401431][ T7292] bridge_slave_0: entered allmulticast mode [ 100.418295][ T7292] bridge_slave_0: entered promiscuous mode [ 100.429043][ T7292] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.436511][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.444031][ T7292] bridge_slave_1: entered allmulticast mode [ 100.450679][ T7292] bridge_slave_1: entered promiscuous mode [ 100.470291][ T7292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.487885][ T5275] IPVS: stop unused estimator thread 0... [ 100.515985][ T7292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.590733][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.9.981'. [ 100.661925][ T7490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.686735][ T7292] team0: Port device team_slave_0 added [ 100.697717][ T7494] bond2: (slave batadv1): Opening slave failed [ 100.769478][ T7292] team0: Port device team_slave_1 added [ 100.840660][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.847830][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.873949][ T7292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.972659][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.979850][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.005915][ T7292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.066371][ T7521] IPVS: stopping backup sync thread 7529 ... [ 101.125440][ T7292] hsr_slave_0: entered promiscuous mode [ 101.131792][ T7292] hsr_slave_1: entered promiscuous mode [ 101.139627][ T7292] debugfs: 'hsr0' already exists in 'hsr' [ 101.145449][ T7292] Cannot create hsr debugfs directory [ 101.161396][ T7537] loop9: detected capacity change from 0 to 2048 [ 101.174811][ T7537] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.314571][ T7554] netlink: 'syz.4.993': attribute type 5 has an invalid length. [ 101.403761][ T7554] netlink: 32 bytes leftover after parsing attributes in process `syz.4.993'. [ 101.428772][ T7554] loop4: detected capacity change from 0 to 512 [ 101.436358][ T7554] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.445661][ T7554] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 101.524583][ T7554] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 101.542610][ T7566] netlink: 'syz.5.995': attribute type 4 has an invalid length. [ 101.565525][ T7554] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 101.593020][ T7554] System zones: 0-2, 18-18, 34-35 [ 101.599049][ T7554] EXT4-fs mount: 27 callbacks suppressed [ 101.599067][ T7554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.666863][ T7007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.884581][ T7292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.899444][ T7292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.933532][ T7292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.935002][ T7606] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 101.950607][ T7604] IPVS: stopping backup sync thread 7606 ... [ 101.959071][ T7292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.971268][ T6305] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.985897][ T7610] loop4: detected capacity change from 0 to 256 [ 102.023229][ T7610] FAT-fs (loop4): bogus sectors per cluster 223 [ 102.029529][ T7610] FAT-fs (loop4): Can't find a valid FAT filesystem [ 102.077064][ T7615] tipc: Started in network mode [ 102.082051][ T7615] tipc: Node identity 4, cluster identity 4711 [ 102.088291][ T7615] tipc: Node number set to 4 [ 102.114441][ T7615] netlink: 'syz.9.1004': attribute type 3 has an invalid length. [ 102.122246][ T7615] netlink: 'syz.9.1004': attribute type 7 has an invalid length. [ 102.122706][ T7610] loop4: detected capacity change from 0 to 1024 [ 102.130212][ T7615] netlink: 'syz.9.1004': attribute type 8 has an invalid length. [ 102.130236][ T7615] netlink: 'syz.9.1004': attribute type 7 has an invalid length. [ 102.152368][ T7615] netlink: 140864 bytes leftover after parsing attributes in process `syz.9.1004'. [ 102.187920][ T7610] EXT4-fs: inline encryption not supported [ 102.193839][ T7610] EXT4-fs: Ignoring removed oldalloc option [ 102.200613][ T7610] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.218208][ T7610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.295100][ T7610] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 102.296224][ T7292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.322795][ T7292] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.333207][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.340363][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.348922][ T7610] EXT4-fs (loop4): Remounting filesystem read-only [ 102.360244][ T7635] 9p: Bad value for 'rfdno' [ 102.388464][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.395650][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.404262][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 102.596814][ T7652] loop7: detected capacity change from 0 to 164 [ 102.623485][ T7292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.712514][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 102.712531][ T29] audit: type=1400 audit(1769490595.959:1759): avc: denied { unmount } for pid=5560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 102.906242][ T7292] veth0_vlan: entered promiscuous mode [ 102.918614][ T7682] netlink: 1072 bytes leftover after parsing attributes in process `syz.9.1010'. [ 102.954441][ T7292] veth1_vlan: entered promiscuous mode [ 102.977149][ T7686] loop7: detected capacity change from 0 to 512 [ 102.988905][ T29] audit: type=1400 audit(1769490596.219:1760): avc: denied { bind } for pid=7685 comm="syz.7.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.017406][ T7007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.034346][ T7292] veth0_macvtap: entered promiscuous mode [ 103.084847][ T7292] veth1_macvtap: entered promiscuous mode [ 103.095842][ T29] audit: type=1400 audit(1769490596.279:1761): avc: denied { read write } for pid=7690 comm="syz.9.1013" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.120099][ T29] audit: type=1400 audit(1769490596.279:1762): avc: denied { open } for pid=7690 comm="syz.9.1013" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.154320][ T7686] EXT4-fs (loop7): too many log groups per flexible block group [ 103.159905][ T29] audit: type=1400 audit(1769490596.379:1763): avc: denied { create } for pid=7695 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.176924][ T7292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.182420][ T29] audit: type=1400 audit(1769490596.399:1764): avc: denied { write } for pid=7695 comm="syz.4.1014" lport=44482 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 103.213528][ T29] audit: type=1400 audit(1769490596.399:1765): avc: denied { bind } for pid=7695 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.217556][ T7292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.274007][ T7686] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 103.285332][ T7702] macvlan4: entered promiscuous mode [ 103.295818][ T7686] EXT4-fs (loop7): mount failed [ 103.303533][ T7705] loop4: detected capacity change from 0 to 512 [ 103.324548][ T7705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.339943][ T419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.364738][ T7707] EXT4-fs (loop9): too many log groups per flexible block group [ 103.372452][ T7707] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 103.373667][ T29] audit: type=1400 audit(1769490596.519:1766): avc: denied { create } for pid=7689 comm="syz.5.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.399260][ T29] audit: type=1400 audit(1769490596.569:1767): avc: denied { write } for pid=7706 comm="syz.9.1016" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.423757][ T419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.482981][ T29] audit: type=1400 audit(1769490596.729:1768): avc: denied { mounton } for pid=7292 comm="syz-executor" path="/root/syzkaller.04hA3O/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 103.492172][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.533209][ T7707] EXT4-fs (loop9): mount failed [ 103.547925][ T7705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.560920][ T7705] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.626131][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.660165][ T7007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.686225][ T7720] EXT4-fs (loop9): too many log groups per flexible block group [ 103.717818][ T7720] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 103.753296][ T7720] EXT4-fs (loop9): mount failed [ 103.847012][ T7734] rock: directory entry would overflow storage [ 103.853277][ T7734] rock: sig=0x5245, size=8, remaining=5 [ 103.867282][ T7731] EXT4-fs: Ignoring removed oldalloc option [ 103.873350][ T7731] EXT4-fs: Ignoring removed bh option [ 103.918459][ T7731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.155480][ T7760] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1027'. [ 104.233362][ T7759] FAULT_INJECTION: forcing a failure. [ 104.233362][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.246646][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.5.1026 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.246689][ T7759] Tainted: [W]=WARN [ 104.246769][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.246807][ T7759] Call Trace: [ 104.246817][ T7759] [ 104.246827][ T7759] __dump_stack+0x1d/0x30 [ 104.246861][ T7759] dump_stack_lvl+0x95/0xd0 [ 104.246905][ T7759] dump_stack+0x15/0x1b [ 104.246933][ T7759] should_fail_ex+0x263/0x280 [ 104.246976][ T7759] should_fail+0xb/0x20 [ 104.247060][ T7759] should_fail_usercopy+0x1a/0x20 [ 104.247093][ T7759] copy_folio_from_iter_atomic+0x269/0x1170 [ 104.247121][ T7759] ? shmem_write_begin+0xfc/0x1f0 [ 104.247190][ T7759] ? shmem_write_begin+0x135/0x1f0 [ 104.247230][ T7759] generic_perform_write+0x2c1/0x490 [ 104.247311][ T7759] shmem_file_write_iter+0xc5/0xf0 [ 104.247356][ T7759] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 104.247411][ T7759] vfs_write+0x5a6/0x9f0 [ 104.247438][ T7759] ksys_write+0xdc/0x1a0 [ 104.247484][ T7759] __x64_sys_write+0x40/0x50 [ 104.247511][ T7759] x64_sys_call+0x2847/0x3000 [ 104.247582][ T7759] do_syscall_64+0xc0/0x2a0 [ 104.247660][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.247690][ T7759] RIP: 0033:0x7efd6942b78e [ 104.247709][ T7759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.247729][ T7759] RSP: 002b:00007efd67ec6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.247748][ T7759] RAX: ffffffffffffffda RBX: 00007efd67ec76c0 RCX: 00007efd6942b78e [ 104.247816][ T7759] RDX: 0000000000040000 RSI: 00007efd5faa7000 RDI: 0000000000000004 [ 104.247830][ T7759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.247845][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 104.247927][ T7759] R13: 00007efd67ec6ee0 R14: 00007efd67ec6ea0 R15: 00007efd5faa7000 [ 104.247954][ T7759] [ 104.313959][ T7769] FAT-fs (loop9): bogus sectors per cluster 223 [ 104.454901][ T7769] FAT-fs (loop9): Can't find a valid FAT filesystem [ 104.479685][ T7007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.566640][ T7778] tipc: Started in network mode [ 104.571554][ T7778] tipc: Node identity 4, cluster identity 4711 [ 104.577760][ T7778] tipc: Node number set to 4 [ 104.586370][ T7778] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 104.594205][ T7778] netlink: 'syz.4.1030': attribute type 7 has an invalid length. [ 104.601982][ T7778] netlink: 'syz.4.1030': attribute type 8 has an invalid length. [ 104.609751][ T7778] netlink: 'syz.4.1030': attribute type 7 has an invalid length. [ 104.617517][ T7778] netlink: 140864 bytes leftover after parsing attributes in process `syz.4.1030'. [ 104.647058][ T7769] EXT4-fs: inline encryption not supported [ 104.652928][ T7769] EXT4-fs: Ignoring removed oldalloc option [ 104.665584][ T7783] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1032'. [ 104.674770][ T7783] bond0: entered promiscuous mode [ 104.679839][ T7783] bond_slave_0: entered promiscuous mode [ 104.685697][ T7783] bond_slave_1: entered promiscuous mode [ 104.704559][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.712903][ T7769] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.733556][ T7790] vhci_hcd vhci_hcd.0: invalid port number 0 [ 104.745799][ T7783] bridge0: port 3(bond0) entered blocking state [ 104.752165][ T7783] bridge0: port 3(bond0) entered disabled state [ 104.767927][ T7783] bond0: entered allmulticast mode [ 104.773244][ T7783] bond_slave_0: entered allmulticast mode [ 104.779059][ T7783] bond_slave_1: entered allmulticast mode [ 104.812426][ T7769] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.825207][ T7791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.841348][ T7791] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.853179][ T7769] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 104.883504][ T7769] EXT4-fs (loop9): Remounting filesystem read-only [ 104.903770][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1029'. [ 104.970043][ T7759] EXT4-fs (loop5): 1 orphan inode deleted [ 105.088237][ T7759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.120172][ T7759] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.184948][ T6305] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.230431][ T7824] set_capacity_and_notify: 9 callbacks suppressed [ 105.230452][ T7824] loop9: detected capacity change from 0 to 764 [ 105.275364][ T7824] rock: directory entry would overflow storage [ 105.281563][ T7824] rock: sig=0x5245, size=8, remaining=5 [ 105.298003][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.461172][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1039'. [ 105.535244][ T7292] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.610878][ T7875] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 105.615682][ T7870] IPVS: stopping backup sync thread 7875 ... [ 105.626985][ T7869] loop4: detected capacity change from 0 to 1024 [ 105.658584][ T7879] loop7: detected capacity change from 0 to 764 [ 105.658809][ T7869] EXT4-fs: Ignoring removed bh option [ 105.681445][ T7879] rock: directory entry would overflow storage [ 105.687712][ T7879] rock: sig=0x5245, size=8, remaining=5 [ 105.696813][ T7869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.735835][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1048'. [ 105.745822][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1048'. [ 105.755584][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1043'. [ 105.775387][ T7007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.987747][ T7924] loop7: detected capacity change from 0 to 128 [ 106.018566][ T7924] FAT-fs (loop7): bread failed, FSINFO block (sector = 2048) [ 106.031592][ T7928] loop1: detected capacity change from 0 to 512 [ 106.087141][ T7928] EXT4-fs (loop1): too many log groups per flexible block group [ 106.119162][ T7928] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 106.141905][ T7937] loop9: detected capacity change from 0 to 764 [ 106.157249][ T7928] EXT4-fs (loop1): mount failed [ 106.169378][ T7937] rock: directory entry would overflow storage [ 106.175647][ T7937] rock: sig=0x5245, size=8, remaining=5 [ 106.307678][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 106.319968][ T7962] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 106.330351][ T7957] IPVS: stopping backup sync thread 7962 ... [ 106.472161][ T7984] loop5: detected capacity change from 0 to 256 [ 106.480954][ T7987] loop7: detected capacity change from 0 to 256 [ 106.507621][ T7984] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 106.534021][ T7982] loop4: detected capacity change from 0 to 256 [ 106.553393][ T7984] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 106.598631][ T7994] validate_nla: 1 callbacks suppressed [ 106.598651][ T7994] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 106.612319][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1071'. [ 106.615436][ T7982] bio_check_eod: 36 callbacks suppressed [ 106.615486][ T7982] syz.4.1065: attempt to access beyond end of device [ 106.615486][ T7982] loop4: rw=2049, sector=376, nr_sectors = 40 limit=256 [ 106.626640][ T7984] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 106.654376][ T7994] team0: entered promiscuous mode [ 106.659481][ T7994] team_slave_0: entered promiscuous mode [ 106.665309][ T7994] team_slave_1: entered promiscuous mode [ 106.671158][ T7994] team0: entered allmulticast mode [ 106.676341][ T7994] team_slave_0: entered allmulticast mode [ 106.677796][ T7982] syz.4.1065: attempt to access beyond end of device [ 106.677796][ T7982] loop4: rw=2049, sector=448, nr_sectors = 32 limit=256 [ 106.682085][ T7994] team_slave_1: entered allmulticast mode [ 106.710260][ T7994] bridge0: port 3(team0) entered blocking state [ 106.716698][ T7994] bridge0: port 3(team0) entered disabled state [ 106.730707][ T8003] loop9: detected capacity change from 0 to 1024 [ 106.748461][ T7994] bridge0: port 3(team0) entered blocking state [ 106.749024][ T7999] rock: directory entry would overflow storage [ 106.754837][ T7994] bridge0: port 3(team0) entered forwarding state [ 106.760967][ T7999] rock: sig=0x5245, size=8, remaining=5 [ 106.773243][ T7982] syz.4.1065: attempt to access beyond end of device [ 106.773243][ T7982] loop4: rw=2049, sector=512, nr_sectors = 32 limit=256 [ 106.788095][ T8003] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.799897][ T8003] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 106.810876][ T8003] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 106.821093][ T7982] syz.4.1065: attempt to access beyond end of device [ 106.821093][ T7982] loop4: rw=2049, sector=640, nr_sectors = 32 limit=256 [ 106.835056][ T8003] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.859123][ T8003] EXT4-fs (loop9): invalid journal inode [ 106.864946][ T8003] EXT4-fs (loop9): can't get journal size [ 106.891735][ T8003] EXT4-fs error (device loop9): ext4_protect_reserved_inode:182: inode #3: comm syz.9.1073: blocks 2-2 from inode overlap system zone [ 106.912650][ T8003] EXT4-fs (loop9): failed to initialize system zone (-117) [ 106.921712][ T8003] EXT4-fs (loop9): mount failed [ 107.012248][ T8021] EXT4-fs (loop9): too many log groups per flexible block group [ 107.025717][ T8021] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 107.035029][ T8021] EXT4-fs (loop9): mount failed [ 107.227007][ T1659] kworker/u8:6: attempt to access beyond end of device [ 107.227007][ T1659] loop4: rw=1, sector=256, nr_sectors = 120 limit=256 [ 107.336762][ T8055] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 107.386883][ T8055] EXT4-fs (loop7): 1 truncate cleaned up [ 107.412141][ T8055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.438549][ T8064] EXT4-fs: Ignoring removed bh option [ 107.487299][ T8049] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.514445][ T8064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.549150][ T5560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.576698][ T8044] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1080'. [ 107.578781][ T8064] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.615340][ T3792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.662653][ T8049] EXT4-fs (loop9): orphan cleanup on readonly fs [ 107.681756][ T8049] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.1081: Allocating blocks 41-42 which overlap fs metadata [ 107.707458][ T8049] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.1081: Allocating blocks 41-42 which overlap fs metadata [ 107.739481][ T8086] IPVS: stopping backup sync thread 8087 ... [ 107.739563][ T8089] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 107.761080][ T8083] IPVS: stopping backup sync thread 8089 ... [ 107.769451][ T8049] __quota_error: 47 callbacks suppressed [ 107.769533][ T8049] Quota error (device loop9): write_blk: dquota write failed [ 107.822169][ T8049] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 107.854055][ T8049] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1081: Failed to acquire dquot type 1 [ 107.885662][ T8105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.898023][ T8049] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 107.946199][ T8049] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.1081: corrupted inode contents [ 107.994927][ T8105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.005665][ T8049] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.1081: mark_inode_dirty error [ 108.057406][ T8108] EXT4-fs (loop5): too many log groups per flexible block group [ 108.079548][ T8108] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 108.110688][ T8108] EXT4-fs (loop5): mount failed [ 108.124143][ T8049] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.1081: corrupted inode contents [ 108.138611][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 108.174778][ T29] audit: type=1326 audit(1769490601.429:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.1.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92b850aeb9 code=0x0 [ 108.203595][ T8049] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.1081: mark_inode_dirty error [ 108.222790][ T8123] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 108.233053][ T8122] IPVS: stopping backup sync thread 8123 ... [ 108.272360][ T8049] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.1081: corrupted inode contents [ 108.272567][ T5560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.335173][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'. [ 108.344548][ T8049] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 108.376952][ T8049] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.1081: corrupted inode contents [ 108.428604][ T8135] syz.1.1093: attempt to access beyond end of device [ 108.428604][ T8135] loop1: rw=2049, sector=376, nr_sectors = 40 limit=256 [ 108.449104][ T8049] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.1081: mark_inode_dirty error [ 108.463328][ T8135] syz.1.1093: attempt to access beyond end of device [ 108.463328][ T8135] loop1: rw=2049, sector=448, nr_sectors = 32 limit=256 [ 108.487252][ T8143] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.503964][ T8143] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 108.513652][ T8135] syz.1.1093: attempt to access beyond end of device [ 108.513652][ T8135] loop1: rw=2049, sector=512, nr_sectors = 32 limit=256 [ 108.522498][ T8049] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 108.556265][ T8049] EXT4-fs (loop9): 1 truncate cleaned up [ 108.577785][ T8148] EXT4-fs: dax option not supported [ 108.613310][ T8135] syz.1.1093: attempt to access beyond end of device [ 108.613310][ T8135] loop1: rw=2049, sector=640, nr_sectors = 32 limit=256 [ 108.627452][ T8049] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.691101][ T29] audit: type=1400 audit(1769490601.939:1815): avc: denied { write } for pid=8149 comm="syz.4.1099" name="ip_vs" dev="proc" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 108.732498][ T8049] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.780562][ T8155] tmpfs: Bad value for 'mpol' [ 108.807409][ T29] audit: type=1400 audit(1769490602.029:1816): avc: denied { mounton } for pid=8149 comm="syz.4.1099" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 108.992865][ T8175] netlink: 'syz.5.1106': attribute type 10 has an invalid length. [ 109.000835][ T8175] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1106'. [ 109.034402][ T8178] EXT4-fs (loop9): too many log groups per flexible block group [ 109.052453][ T8178] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 109.061928][ T8178] EXT4-fs (loop9): mount failed [ 109.083321][ T8175] bond0: entered promiscuous mode [ 109.088428][ T8175] bond_slave_0: entered promiscuous mode [ 109.094395][ T8175] bond_slave_1: entered promiscuous mode [ 109.124901][ T8175] bridge0: port 3(bond0) entered blocking state [ 109.131284][ T8175] bridge0: port 3(bond0) entered disabled state [ 109.149720][ T419] kworker/u8:5: attempt to access beyond end of device [ 109.149720][ T419] loop1: rw=1, sector=256, nr_sectors = 120 limit=256 [ 109.156254][ T8186] vhci_hcd vhci_hcd.0: invalid port number 0 [ 109.163856][ T29] audit: type=1400 audit(1769490602.399:1817): avc: denied { setopt } for pid=8187 comm="syz.7.1109" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.201981][ T8175] bond0: entered allmulticast mode [ 109.207291][ T8175] bond_slave_0: entered allmulticast mode [ 109.213184][ T8175] bond_slave_1: entered allmulticast mode [ 109.265068][ T8175] bond0: left allmulticast mode [ 109.270094][ T8175] bond_slave_0: left allmulticast mode [ 109.275751][ T8175] bond_slave_1: left allmulticast mode [ 109.281442][ T8188] netlink: 'syz.7.1109': attribute type 15 has an invalid length. [ 109.301148][ T29] audit: type=1400 audit(1769490602.549:1818): avc: denied { read } for pid=8187 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.354252][ T29] audit: type=1400 audit(1769490602.609:1819): avc: denied { create } for pid=8187 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.373988][ T29] audit: type=1400 audit(1769490602.609:1820): avc: denied { write } for pid=8187 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.388855][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.393510][ T29] audit: type=1400 audit(1769490602.609:1821): avc: denied { write } for pid=8187 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.435799][ T8204] rock: directory entry would overflow storage [ 109.442057][ T8204] rock: sig=0x5245, size=8, remaining=5 [ 109.448611][ T8199] rock: directory entry would overflow storage [ 109.454855][ T8199] rock: sig=0x5245, size=8, remaining=5 [ 109.465058][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.474753][ T8199] FAULT_INJECTION: forcing a failure. [ 109.474753][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 109.487527][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.9.1111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.487644][ T8199] Tainted: [W]=WARN [ 109.487653][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.487672][ T8199] Call Trace: [ 109.487681][ T8199] [ 109.487691][ T8199] __dump_stack+0x1d/0x30 [ 109.487725][ T8199] dump_stack_lvl+0x95/0xd0 [ 109.487756][ T8199] dump_stack+0x15/0x1b [ 109.487792][ T8199] should_fail_ex+0x263/0x280 [ 109.487834][ T8199] should_failslab+0x8c/0xb0 [ 109.487896][ T8199] __kmalloc_noprof+0xb8/0x580 [ 109.487931][ T8199] ? kernfs_fop_write_iter+0xe2/0x300 [ 109.487978][ T8199] kernfs_fop_write_iter+0xe2/0x300 [ 109.488090][ T8199] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 109.488135][ T8199] vfs_write+0x5a6/0x9f0 [ 109.488164][ T8199] ksys_write+0xdc/0x1a0 [ 109.488243][ T8199] __x64_sys_write+0x40/0x50 [ 109.488270][ T8199] x64_sys_call+0x2847/0x3000 [ 109.488305][ T8199] do_syscall_64+0xc0/0x2a0 [ 109.488396][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.488426][ T8199] RIP: 0033:0x7f5584adaeb9 [ 109.488447][ T8199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.488473][ T8199] RSP: 002b:00007f5583537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.488494][ T8199] RAX: ffffffffffffffda RBX: 00007f5584d55fa0 RCX: 00007f5584adaeb9 [ 109.488582][ T8199] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000004 [ 109.488600][ T8199] RBP: 00007f5583537090 R08: 0000000000000000 R09: 0000000000000000 [ 109.488619][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.488637][ T8199] R13: 00007f5584d56038 R14: 00007f5584d55fa0 R15: 00007ffc40a78118 [ 109.488677][ T8199] [ 109.870269][ T8229] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.873710][ T8197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.899392][ T8229] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.901975][ T8229] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1116: Failed to acquire dquot type 1 [ 109.902786][ T8229] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1116: bg 0: block 40: padding at end of block bitmap is not set [ 109.904255][ T8229] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 109.905195][ T8229] EXT4-fs (loop4): 1 truncate cleaned up [ 109.905688][ T8229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.035446][ T8222] ip_vti0 speed is unknown, defaulting to 1000 [ 110.061449][ T7007] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.166858][ T8197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.222043][ T8245] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 110.222144][ T8242] IPVS: stopping backup sync thread 8245 ... [ 110.247237][ T8239] loop5: p1 p3 < p5 p6 > [ 110.251804][ T8239] loop5: p1 size 150994947 extends beyond EOD, truncated [ 110.261149][ T8239] loop5: p5 size 65800 extends beyond EOD, truncated [ 110.292060][ T8239] loop5: p6 start 117448704 is beyond EOD, truncated [ 110.407352][ T8197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.440999][ T8252] set_capacity_and_notify: 16 callbacks suppressed [ 110.441020][ T8252] loop4: detected capacity change from 0 to 764 [ 110.460746][ T8251] loop7: detected capacity change from 0 to 512 [ 110.480457][ T8252] rock: directory entry would overflow storage [ 110.486744][ T8252] rock: sig=0x5245, size=8, remaining=5 [ 110.524911][ T8251] EXT4-fs (loop7): too many log groups per flexible block group [ 110.560545][ T8251] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 110.579381][ T8259] loop5: detected capacity change from 0 to 256 [ 110.615447][ T8251] EXT4-fs (loop7): mount failed [ 110.709317][ T8262] loop9: detected capacity change from 0 to 512 [ 110.722498][ T8262] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.784674][ T8262] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 110.803690][ T8262] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1123: bg 0: block 248: padding at end of block bitmap is not set [ 110.847025][ T8197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.879642][ T8262] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1123: Failed to acquire dquot type 1 [ 110.892107][ T8262] EXT4-fs (loop9): 1 truncate cleaned up [ 110.924878][ T8262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 111.039679][ T8276] loop7: detected capacity change from 0 to 764 [ 111.082739][ T8276] rock: directory entry would overflow storage [ 111.089211][ T8276] rock: sig=0x5245, size=8, remaining=5 [ 111.102917][ T8276] FAULT_INJECTION: forcing a failure. [ 111.102917][ T8276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.116316][ T8276] CPU: 0 UID: 0 PID: 8276 Comm: syz.7.1126 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.116400][ T8276] Tainted: [W]=WARN [ 111.116410][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.116428][ T8276] Call Trace: [ 111.116437][ T8276] [ 111.116447][ T8276] __dump_stack+0x1d/0x30 [ 111.116482][ T8276] dump_stack_lvl+0x95/0xd0 [ 111.116517][ T8276] dump_stack+0x15/0x1b [ 111.116579][ T8276] should_fail_ex+0x263/0x280 [ 111.116623][ T8276] should_fail+0xb/0x20 [ 111.116661][ T8276] should_fail_usercopy+0x1a/0x20 [ 111.116771][ T8276] _copy_from_iter+0xcf/0xea0 [ 111.116818][ T8276] ? __kmalloc_noprof+0x4a3/0x580 [ 111.116857][ T8276] ? kernfs_fop_write_iter+0xe2/0x300 [ 111.116966][ T8276] kernfs_fop_write_iter+0x125/0x300 [ 111.117001][ T8276] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 111.117040][ T8276] vfs_write+0x5a6/0x9f0 [ 111.117125][ T8276] ksys_write+0xdc/0x1a0 [ 111.117154][ T8276] __x64_sys_write+0x40/0x50 [ 111.117182][ T8276] x64_sys_call+0x2847/0x3000 [ 111.117227][ T8276] do_syscall_64+0xc0/0x2a0 [ 111.117278][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.117325][ T8276] RIP: 0033:0x7f8f80e0aeb9 [ 111.117416][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.117440][ T8276] RSP: 002b:00007f8f7f867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.117467][ T8276] RAX: ffffffffffffffda RBX: 00007f8f81085fa0 RCX: 00007f8f80e0aeb9 [ 111.117482][ T8276] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000004 [ 111.117546][ T8276] RBP: 00007f8f7f867090 R08: 0000000000000000 R09: 0000000000000000 [ 111.117565][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.117599][ T8276] R13: 00007f8f81086038 R14: 00007f8f81085fa0 R15: 00007ffe56e99d48 [ 111.117627][ T8276] [ 111.339398][ T1659] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.442117][ T6305] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 111.477719][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.489319][ T8294] __nla_validate_parse: 2 callbacks suppressed [ 111.489339][ T8294] netlink: 968 bytes leftover after parsing attributes in process `syz.7.1127'. [ 111.560323][ T3308] ================================================================== [ 111.568468][ T3308] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 111.575464][ T3308] [ 111.577827][ T3308] write to 0xffff888103a0a6bc of 4 bytes by task 4120 on cpu 0: [ 111.585517][ T3308] shmem_mknod+0x143/0x170 [ 111.589986][ T3308] shmem_create+0x34/0x50 [ 111.594373][ T3308] path_openat+0x1121/0x23c0 [ 111.599014][ T3308] do_filp_open+0x15d/0x280 [ 111.603559][ T3308] do_sys_openat2+0xa6/0x150 [ 111.608241][ T3308] __x64_sys_openat+0xf2/0x120 [ 111.613051][ T3308] x64_sys_call+0x2b07/0x3000 [ 111.615076][ T8288] syzkaller0: entered promiscuous mode [ 111.617770][ T3308] do_syscall_64+0xc0/0x2a0 [ 111.623441][ T8288] syzkaller0: entered allmulticast mode [ 111.627866][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.639367][ T3308] [ 111.641716][ T3308] read to 0xffff888103a0a6bc of 4 bytes by task 3308 on cpu 1: [ 111.649647][ T3308] fill_mg_cmtime+0x5b/0x260 [ 111.654286][ T3308] generic_fillattr+0x24a/0x340 [ 111.659176][ T3308] shmem_getattr+0x181/0x200 [ 111.663814][ T3308] vfs_getattr_nosec+0x146/0x1e0 [ 111.668792][ T3308] vfs_getattr+0x48/0x60 [ 111.673154][ T3308] vfs_statx_path+0x28/0x140 [ 111.677782][ T3308] vfs_statx+0xc4/0x170 [ 111.681981][ T3308] vfs_fstatat+0x115/0x170 [ 111.686423][ T3308] __se_sys_newfstatat+0x55/0x3e0 [ 111.691476][ T3308] __x64_sys_newfstatat+0x55/0x70 [ 111.696529][ T3308] x64_sys_call+0x111f/0x3000 [ 111.701234][ T3308] do_syscall_64+0xc0/0x2a0 [ 111.705772][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.711784][ T3308] [ 111.714138][ T3308] value changed: 0x30db7c58 -> 0x31052a8f [ 111.719871][ T3308] [ 111.722296][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 111.728465][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.739345][ T3308] Tainted: [W]=WARN [ 111.743169][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.753249][ T3308] ================================================================== [ 111.764223][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.791636][ T8288] loop7: detected capacity change from 0 to 512 [ 111.804312][ T8288] EXT4-fs: dax option not supported [ 111.908137][ T5278] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0