last executing test programs: 12.388267565s ago: executing program 1 (id=180): r0 = getpid() creat(&(0x7f00000002c0)='./file0\x00', 0xf) (async) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x4}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x9], 0x0, 0x0, 0x1, 0x0, r0}}, 0x40) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) unshare(0x20000400) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, 0x0) (async) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, 0x0) 12.30873403s ago: executing program 1 (id=184): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x8, 0xfffffffffffffdef, 0x0}}, 0x10) set_mempolicy(0x8000, &(0x7f0000000000)=0x3, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) 12.248684752s ago: executing program 1 (id=186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") quotactl$Q_GETQUOTA(0xffffffff80000700, 0x0, 0x0, &(0x7f0000000280)) 11.616504224s ago: executing program 1 (id=194): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file2\x00', 0x2204806, &(0x7f0000000c40)=ANY=[], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNgRBkB9PkhVwsEyR5MaBkAEtR1E2B0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw0kRVmyRMlqbLdJ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOVUi8WSpbrX3No22Zxq4DcmLE9aW9DtZOL21H4lK/qjfF6XklmXvnu0+GL0101dSZ5dUT56yOvgjYtvPvjOfC5df0JCX4ZmbfD5i4MnDzud3WcniJ3TzM1/lZQ7QdCG2/RC32vYG67xQt9U1teLdzdroal5dTfcCdtuwziBm2v7gVl1bptSpbJm3MKOv9XcqNp1N515/wflYnHd/HgpOdCSCqGz6dXrXnMjjokWRzH3zSc/TQJcu2HM3uPO7tq0JKOgUtbC3EBQeVpL5WK5XCqVy6X1e5V794vF+ZEZxYhV7NNIxKm/aPGKOb2TN/CSclH9/7sl1ZVXU1valhn746iqQL4aGct70vr/1l13Yr+D9T+t8pekd3qLLyuu/9eSZ9ey6n9GLkYmXmHcEitj/mw/C3FGRs/1Qgd6oofqqKNdPTuFto3M9VNp5Rx+NuSqKU+hfHlqyI7nmN4co4rWta6i3tOmagplVJOnulyF2lFYl9z4FeUokCtbbfkKZLQqR7dlVFJFFa3JyFVBO/K1paY2VJWt/3S73T09jvf72oQclQaVMgKWBoPKE1rKqv8/+zh5nfbqf5H6/02VvA6WkofPJ8UAXwPd3vX/jK6fTTYAAAAAAOAsWPFv3634vfurkrqqeXW3mL3C4nlmBwAAAAAAToOl7pKuyIqu/yVdlTXl+h8AAAAAALxyrPgeO0vSSvyhfuvoTqiT/BJg7hxSBAAAAAAALym+8//aotSNB624Lmum638AAAAAAPAK+N3AGPvz6Ri73fRt/ZyksLVk/e1fSwoWrMPW9vesfTtaYu/P5eKQkU8AtGuXrfCPyUC98Xi9i5LiZ457xer11hsEsz/u4Bd708b6t4JjCSzODTZwLIELvbWtqOf1+d4zfaIb7wzFPjrIKV6S9LJS8+puwfHrD0qy7Qu5trvd/uXTx7+Sgv527j3u7Bbe/7DzKM7lMJp1uB/l8XGazl8Xe7tuOJf4oZ/L/7oJ6erYLV5WLe3y983GihX3W0y3f072fu7oGGVu/3Cf+o1uJsfs5koSu3LQH3E/2v58tP2lQnzIhrY+WLCOsigd3/JxByIji3ycxa0k5tbqreQhzS9qJ2flvz8nlQujx2Aoi/JgFtP3hfXvkX0xKYvevliLsvgsaigji7XZshg5IgDwVdmLR/2J7/yLBzEfqbtpeUhPal+q7kyv7u8OV/eP/hRVxuS/F/O99yYm9pJXdEZfteI6tKj4xDp/eeSMnm6NfSGvjDN68SWqW9TXX46+A6mX9kgW/+12uw9Kcb9/OFZVP41W+DSz37Ce7Pa7H+3/PB4AP/LB7ge7T8vltfXi28XivbIW4s3oPcyJ2gMAGDH9O3amRlhv60YScePRP99KpoYq3rf7Hyko6H19qI4eaSH9CoHr41tdGfgYwp3kqlUDV63m4psPlqXjsSXdybyqi2vpQGy5H7ugdJXhSn0Uu3bGRwEAgPN1c0odHl//80P1/45Wk4jVy2Ovu4dree/quH9JnxVbGshyYXzy757FHgEA4PXnBl9YK+3fWkHgtd4rVSolu72Zvu/sVTdc4zXbbuBs2s0N17QCv+07ft20Ai15VTc04Var5QdtU/MD0/JDbzv+5nfT++r30G3YzbbnhK26a4eucfxm23bapuqFjmlt/ajuhZtuEK8ctlzHq3mO3fb8pgn9rcBxC8aErjsQ6FXdZturedFk07QCr2EHO+Ynfn2r4ZqqGzqB12r7SYNpX16z5geNuNmCujN/0SEAAK+j5y8OnjzsdHafHZ9Yji7NkzmHyogZnVgc0yBjBAEA8DVzVK5nWCnfn/qseyZZAQAAAAAAAAAAAAAAAAAAAACAQdNv6ZtxYmHczYJSf84vLvTm6Nc6usVwpB1Lp53YLBO5WddKb4k4ePL5hODl/px09w/GHJ7bBv7jW9Ib8Rwlc+bHBeez27Gm97U84eCecGIu2kEnDf7hXrJHM2OihWMXLfWPxfzp/3OIJp7+OWNRt9vtTl59aXgfLk7awOGJeUnPFl/iEJz/uQjA+fp/AAAA//+hgDrx") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x6e23, 0x7ffe, @mcast2, 0x9}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0xffff, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000380)=ANY=[], 0x8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r4, 0x0, 0xffffffb4, 0x890, 0x0, 0x0) 11.277795421s ago: executing program 1 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c0000003fed6a8890064e52319aa630b5bf77424abfac51d8b05f80bdf9b9b64e7db20d74dff46fb2786d6b0f3a73f151621549be841ba79abf346ef770eb20634f1a9a", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf25000000000500060004000000060003000200000008001800e0000002"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4c800a01}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1724d80353fc16f50e256cebfb"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c051}, 0x8000) r5 = socket$inet6(0xa, 0x80000, 0x7fffffff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0xd0, 0x0, 0x3f0, 0xd0, 0x1a0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv6=@private2, 0xc, 0x22, 0xffff}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x15, "2b40a3509a99f210ef6b93e62dca9edde988336e6c1b3d7f74163b4a432b"}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff, 0xffffffff, 0x66b03a92613383a8], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'bridge_slave_1\x00', 'pim6reg\x00', {}, {0xff}, 0x87, 0x5, 0x2, 0x11}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 10.864682971s ago: executing program 1 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) (async) sendto$packet(r3, &(0x7f0000000180)="e8b77052a9f6d4", 0x7, 0x40, &(0x7f0000000100)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="624fcb840ca91aa173b7cc79bf8dbd1f0d", 0x11}], 0x1) 10.838841563s ago: executing program 32 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) (async) sendto$packet(r3, &(0x7f0000000180)="e8b77052a9f6d4", 0x7, 0x40, &(0x7f0000000100)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="624fcb840ca91aa173b7cc79bf8dbd1f0d", 0x11}], 0x1) 8.07393531s ago: executing program 2 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000), &(0x7f0000000440)={0x0, 0xfb, 0xf6, 0x4, 0x1, "c693fe2dd727460e9e80d242eb1e8fd6", "b9da5b696008c0f5204235dbf0e9be1e6af91d5cb74fb942174c0663cfe119a44b29c2e67f160f3cfb5134858b05358dc95f2b287732d8918fc0f5f341a98114473b9281c69a6aa833d6bb2724fa0a0ae0f25a774385f41318a65e17ecf2e9811384138a9bf9d9150835b7c37fbece2117d48f3d265c3ab09e35755e328daa77e4a20c19125d1cbe86022cc3e6d0c854b0fdb5d824f012808cfecaafd7b81ee8ab7f6118a2e2f888af45dbdfa1cbebde1170c59b1279173487552b1cd6995569f60a208b3dd988f9fa637756a02ccf9cd9bd0f39bb18f357674d7a6b53b3d2e4b8"}, 0xf6, 0x2) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0xfffffffffffffffe, {0x0, 0xf0, 0x2}, {0x66d28dd696e11126, 0x1, 0x1}, 0x2}, {0x1, 0x3, {}, {0x1, 0xf0, 0x1}, 0xff, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 7.8648314s ago: executing program 2 (id=220): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe88, 0x3}, 0x106200, 0x7, 0x20da, 0x0, 0x2, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x1ec, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@TCA_STAB={0x19c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x61, 0x7, 0xb5, 0x1, 0x1, 0x4, 0x3ff, 0x9}}, {0x16, 0x2, [0x7, 0x4, 0x9, 0x6, 0xb, 0x4, 0x7, 0x1, 0x10]}}, {{0x1c, 0x1, {0x4d, 0x5, 0x401, 0x8001, 0x0, 0x40, 0x10001, 0x3}}, {0xa, 0x2, [0x15e6, 0x3ff, 0xfffb]}}, {{0x1c, 0x1, {0x3, 0xd, 0x9, 0xe23, 0x0, 0x8d, 0x3, 0x8}}, {0x14, 0x2, [0xf01, 0x3, 0x6, 0x6, 0x8, 0x9, 0x5b40, 0xa]}}, {{0x1c, 0x1, {0x9, 0x3, 0xfffe, 0xb, 0x2, 0x22ee, 0xe, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x80, 0x4, 0xfff7, 0x1, 0x1, 0x61ce86b6, 0x6, 0x4}}, {0xc, 0x2, [0x68, 0xd308, 0x81, 0x2]}}, {{0x1c, 0x1, {0x7f, 0xf5, 0x1, 0x4c5, 0x2, 0x6, 0x5, 0x8}}, {0x14, 0x2, [0x9, 0x0, 0x3, 0x80, 0x0, 0x8, 0x4, 0x0]}}, {{0x1c, 0x1, {0x4f, 0x3, 0x46c5, 0xa4, 0x1, 0x6, 0x7, 0x5}}, {0xe, 0x2, [0x80, 0x85, 0x401, 0x9, 0xac4]}}, {{0x1c, 0x1, {0xb, 0x7, 0x8, 0x9, 0x0, 0x9, 0x9, 0x8}}, {0x14, 0x2, [0x8d69, 0x2, 0x40, 0x0, 0x3, 0x1, 0xfff7, 0x0]}}, {{0x1c, 0x1, {0x4, 0x8, 0x8, 0xfffffffd, 0x0, 0x9, 0x6, 0x9}}, {0x16, 0x2, [0x2b0b, 0x100, 0x1000, 0xc5b5, 0x0, 0x4, 0xc7e, 0x0, 0x1]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x4, 0x4, 0x1, 0xea31, 0xfff}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0xd6}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='2\x00@\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf251100000008000300", @ANYRES32=r5, @ANYBLOB="0600280002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x0, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x7, 0x384e, 0x5fdb}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0x40, 0x1, 0x12, @remote, @private2={0xfc, 0x2, '\x00', 0x8}, 0x20, 0x8706, 0x1, 0xe}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x8, 0x3, 0x81, {{0x8, 0x4, 0x2, 0x2, 0x20, 0x65, 0x0, 0x4, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0xb, 0x24, [@empty, @multicast1]}]}}}}}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xe5, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r10, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000000780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7.310108708s ago: executing program 2 (id=223): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$P9_RSTATFS(r0, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x81, 0x4, 0x9, 0x2, 0x8000000000000000, 0x0, 0x1000000000000004, 0xf5, 0x9}}, 0x43) recvmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x600, &(0x7f0000003700)={0x77359400}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xa, 0x7, 0x10001, 0x8, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1bf, &(0x7f0000000400)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r7, &(0x7f0000001400)=""/4096, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r8, r8, 0x0) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000000000)=@sg0, r8, 0x0) 6.772459064s ago: executing program 2 (id=225): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, 0x0, 0x321, 0x70bd1f, 0x25dfdbfd, {{}, {@val={0x8, 0x117, 0x26}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x4a}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40040d2}, 0x40050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x800000004000000, 0x200}, 0x946, 0x0, 0x11000, 0x3, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1d) io_setup(0x239f, &(0x7f0000000380)=0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, 0x0, 0x1000004, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100c}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="b5f29bc4c521643cebd67ae24c2994fca6b41bfe0a188657ca03a2268dd878625db3141a3a47d7528182e0af5e3fac7e63101579855a06905cedd64f6262e4103341240b7c31734ee5cf419071cd9dad8eb71db9ad33c86984889c0a13ee67bd2cc81d43c76e27257de6f5f84fa5bf79af04507fe6bf5731223f379cecbd6284d44c0bb914aabf4fbf1ee04fca9ba4fbc8b33334c1", @ANYRES64=r5, @ANYRES8=r3, @ANYRESHEX=r4, @ANYRES8=r0], 0x5c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) lstat(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000140)=0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x1c0, 0x0, 0xd0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0xff000000, 0xffffffff], 'ip6gre0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x37}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xff0000ff, 0xffffffff, 0xff], 'gretap0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x7, 0x6, 0x60}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000000)={0x9, 0x3}) 5.64582918s ago: executing program 2 (id=238): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='task\x00') cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000007c0)=0x80) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2) fcntl$dupfd(r4, 0x406, r0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r5, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x8, 0xe0, &(0x7f0000000240)={0x80, 0xa, 0xfffa, 0x4360}, 0x8, 0x6, 0x1, 0x0, 0x169, 0x101, 0x0}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14c900, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) set_robust_list(&(0x7f0000000100)={0x0, 0x1}, 0x18) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x7, 0x1}, 0x7, 0x81, &(0x7f00000002c0)="c2c754e02aa3f0c17999637096845a5558421bc383cad493a713abbd50bdc774abc1b3448cdf0a8ee10f18eee417b19f25cef6de8e154ce91c3cb97aebaa8c22f4ffd45f6a0b0a2f56c16dfae5ef6742989690ef9b25458f1a1b4bfcebb395f7221d51ab84b6b770e8c8d45c9206bd529857d578421104e40d7184585b41bb33e87807cdda40b57df044fc01325c2d714dc5a999998aa8daccc875a8f784efb4f85b98d628fd15f8c5dda6d88ff5e77d988359f9138055b5905d89d79b2b85f057c0b1792529e593adcf316efd0c7c4f134c104998a122106551cd954e887a441a0cb37709d4462f82943c3e9a", 0xed, 0x4, 0x5f88, 0x0, 0x6, 0x80, &(0x7f0000000580)="870491ad2bcfc49880a45d37d032d68933446c509eeb002ce4a8ec51e6750b71485d3ff1213e470cc19ded73dcd02c8a9e0e952dcd3bae1bd23cd13d88c9d8c4ed886f26455227ef07432340337c8fe8cd24c700c4cb29e29a89efbca4e23379eb2d5013cf45ac3dec1f86413532e5ecbf29a8d07811123132d9e35d4e47a039bbd2c8f52b2c34874c07033e105620c3ec6275fccdedd07f9b6a3ba63d3041f07bd433fc9c0e6fa0c5977a82c1d202edf45cbb5e4bdb98570710623c64837ed698d2c187728349dd3f57623ea468fb10"}) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') 3.184552072s ago: executing program 4 (id=260): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff, 0x2}, 0xe) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x81}], 0x2, 0x1}}, @common=@unspec=@connbytes={{0x38}, {[{0x7bb}, {0x7}], 0x2, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0x80000001, 0x8363, 'netbios-ns\x00', 'syz1\x00', {0x7ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r5}, 0x38) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) openat(r0, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) r6 = socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000500)={@isdn={0x22, 0x7, 0x6, 0x40, 0xf2}, {&(0x7f0000000340)=""/237, 0xed}, &(0x7f00000004c0), 0x10}, 0xa0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000880)={0x0, 0x200}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) 3.144153374s ago: executing program 3 (id=261): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20519, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f6, 0x2, @perf_config_ext={0x4, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0xb) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) fcntl$setown(r1, 0x8, r0) getrlimit(0x2, &(0x7f0000000000)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 3.0249923s ago: executing program 4 (id=264): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x2000000000000216, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000000000000000000000000000850000000f00000018010000646c6c2400000a00006a000000007bc9118f2dab35ac433e709334451af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007c5e6c9b0a6a0c8ac6def0fa793702070937f23153b05941d52513d41ed3d02846460119182ca5bffebfaf68f9a45e1ddb4331e3fe69a87dc348fabd8476b6a5668058171e0612430f428a7d4e"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5713}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb21001e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sync_file_range(r1, 0x7, 0x6, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f00006c1000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00001c1000/0x3000)=nil, &(0x7f0000754000/0x2000)=nil, &(0x7f0000398000/0x3000)=nil, &(0x7f00007f3000/0x2000)=nil, &(0x7f000035b000/0x1000)=nil, &(0x7f00002ff000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005af000/0x3000)=nil, &(0x7f0000000100)="0aef3abf90", 0x5, r2}, 0x68) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r3, 0x200047bc, 0x1000000, 0x0, 0x0, 0x5e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000020afd016aea5fb7400010000000000fbdbdf2d0a961400000000071a00000014000200fc02000000e1fffffe0000000000000108001700dff2dfa26798a35fc4d15b21000000000000b6dc51bb12b344d19f5019c6730820b01eecfe82e732fe147a7933fc1d8ac0778a9789206816234d2450d4aa86ae1afb00ab631c2be11ca5a17c78b19efca21a2b887195ebf7fe4076a2a8d0d691952d9dc030345d08cd31"], 0x4c}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) pwrite64(r10, &(0x7f0000000140)='2', 0x1, 0xfe8c) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x106) close(r11) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000104000000f60000fcffffff85000000300000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.587729392s ago: executing program 4 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="709a72000006ffff26bd700038dab1dea1453a242b7ad782b12356000000000000007daafb1cdd67089559c415d59e56ff45278f99601a61f402db3a4977e1e91f138bdf599a70d2513bf3849db72a7ead546dd86ef08607195c6d6a3a4c2a72e943a440b3f06b0a5725", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300fc0000000000000000000000000000000800040045000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4004, 0x3}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$IMGETVERSION(r7, 0x80044942, &(0x7f0000000200)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x717724d0, 0x8, {{0x24, 0x4, 0x0, 0x8, 0x90, 0x67, 0x0, 0x8, 0x2f, 0x0, @empty, @loopback, {[@generic={0x89, 0x4, "c927"}, @rr={0x7, 0xf, 0xa2, [@remote, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xcb, [@loopback, @broadcast]}, @cipso={0x86, 0x10, 0x3, [{0x1, 0x8, "c9a676e43a6d"}, {0x6, 0x2}]}, @timestamp_addr={0x44, 0x14, 0xc2, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@loopback, 0x5}]}, @lsrr={0x83, 0x27, 0xa1, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100, @private=0xa010102, @remote, @multicast1, @rand_addr=0x64010102, @local, @private=0xa010100, @private=0xa010102]}, @cipso={0x86, 0xf, 0x2, [{0x7, 0x9, "322092e6da46b7"}]}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x4fc, 0x24, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x8}, {0x10, 0x3}, {0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x1, 0x5a9d1ba4, 0x8, 0x1, 0x6, 0x3, 0x2, 0xfff, 0x101, 0x9, 0x8, 0x9, 0x4, 0x6, 0x2, 0x3, 0x2, 0x6, 0x9, 0xc, 0x6, 0x87, 0x3, 0x95, 0x6d25, 0xd017cee, 0x7, 0x1, 0xfffff260, 0x7, 0x81, 0xe0e3, 0x10, 0x9, 0x80000000, 0x1, 0x4, 0x1ff, 0x100, 0x7, 0x7, 0x8, 0x8, 0x80000001, 0x9, 0x401, 0x2962, 0x5, 0x7fffffff, 0x4, 0x1, 0x8, 0x4, 0x7f, 0x5, 0x5, 0x9, 0x3, 0x2, 0xffffffff, 0x8, 0x100, 0x0, 0x3, 0x100, 0x4, 0x10, 0x5, 0x7, 0x10001, 0x9, 0xfe1, 0x3, 0x2, 0x800, 0x6, 0x122, 0x6, 0x9, 0x95bb, 0x9, 0xffffffff, 0x1, 0x2, 0x3, 0x0, 0x7ff, 0x1, 0x42a, 0x4, 0x8001, 0x5, 0x0, 0x9, 0xca, 0x16a19bd, 0x2, 0x4, 0x10, 0x7, 0xda, 0x2, 0x0, 0x401, 0xf9b, 0x3, 0xffff, 0xc0, 0x2, 0x80000000, 0x0, 0x80000001, 0x1, 0x4, 0x7, 0x6, 0x4, 0x1026, 0x9, 0xfffffffc, 0x5, 0x1, 0x80000001, 0x2, 0x9, 0x10000, 0x1, 0x200, 0x43e, 0x100, 0xb, 0x101, 0xf1, 0x7, 0x1c0000, 0xb, 0x9, 0xb, 0x84c, 0x1000000, 0x3, 0x3732, 0xf36, 0x3, 0xfffffe5c, 0x4, 0xf, 0x7, 0x10001, 0x3, 0x5d, 0x3, 0xfffffff2, 0x9349, 0xb5, 0x3, 0x5, 0xfffffff0, 0x7, 0xf, 0x3, 0x7, 0x98e, 0x4, 0x6, 0xf6a3, 0x7fffffff, 0xfffffffc, 0x8, 0x5c6de122, 0x9, 0x5, 0x6, 0x2, 0x0, 0x5, 0x5be, 0xffffffff, 0x7, 0x7ff, 0x5, 0x0, 0x400, 0x200, 0x2, 0x8001, 0x8, 0x6, 0xd, 0x0, 0x80000000, 0x8, 0xffffffff, 0x400, 0x80000001, 0x0, 0x4, 0xc, 0x2, 0xb31538f, 0x3, 0x6, 0x9, 0x3ff, 0x8000, 0x0, 0x7f, 0x1, 0x2, 0x5, 0x2b, 0x5, 0x5, 0x43, 0x4, 0x10001, 0x53800, 0x3, 0x8001, 0x1, 0x7, 0x8, 0x6, 0x5, 0x5, 0x3, 0x8000, 0x101, 0x0, 0x3, 0x8, 0xb9fd7cd, 0x9, 0x2, 0x1, 0x9, 0x7fff, 0x362, 0xd6, 0x9, 0xc7, 0x49101e3a, 0xf4, 0x3, 0x5, 0x10, 0x1, 0xfff, 0x4, 0x6, 0x5, 0x7fff, 0x100, 0x10]}, @TCA_TBF_RATE64={0xc, 0x4, 0x14dc0bcfa11911e}]}}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x4, 0xdf, 0x2, 0x81, 0x4, 0x8}}, {0x14, 0x2, [0x1, 0x8, 0x5, 0x2fe8, 0x5, 0x3, 0x0, 0x8]}}, {{0x1c, 0x1, {0x1a, 0xfd, 0xa, 0x9, 0x2, 0x0, 0x101, 0x6}}, {0x10, 0x2, [0xf, 0xf800, 0x9, 0x7, 0x100, 0x81]}}, {{0x1c, 0x1, {0xcc, 0x8, 0x8000, 0x3, 0x3, 0x81, 0x4, 0x8}}, {0x14, 0x2, [0x2, 0x4, 0x5, 0x8, 0x6, 0x4, 0xd2, 0x4]}}, {{0x1c, 0x1, {0x3, 0x6, 0x40, 0xfffffffd, 0x1, 0x8850, 0x7fffffff, 0x6}}, {0x10, 0x2, [0xff5e, 0x1, 0xf4c, 0x1, 0x2, 0x4]}}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x4008004}, 0x90) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r10, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V4(r10, 0x8070587c, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={r11}, &(0x7f0000000080)=0x8) 2.464760918s ago: executing program 3 (id=268): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="c82a8f1aefff5150fe2c9412f0019335477e615844b44f0504206a4e0a47244d18f17167e3e04aab7c6e7908824e30f8bc7fc911aab905", 0x37}, {&(0x7f0000000240)="2888c21ee043a3be0360021202f202a21e42c3fe980fede15bfce2b7194717eda0d5675a1299d25f04352447344f01e814af838535a786f5059a6ac103383ba24aae9c644400fafc3dc6dc", 0x4b}], 0x2, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3c46}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @broadcast}}}], 0x68}, 0x800) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000100037040200"/20, @ANYRES32=0x0, @ANYBLOB="c344050000000000480012800b000100697036746e6c00003800028008000700ff07000008000100", @ANYRES32=0x0, @ANYBLOB="0500090004000000050006000800000004002af2080014000200000008000800060000004963d373eb7977af286d62596da8063fcba9e87125f94a4a564ce466be4eca92715d6a612e1405935c458b9b426e3b000000006e38f3ca012b48a357b163fde08c40e21cb45f3f05361c002d8112644ca9651438c9ac24baa51e6592c62d56d52d0bf3052d7a57e7a425ce1820ca5d255c164f54eb480b4f0db93fea785c66f7611163e5359170791fea27a63e5a4a9b8ea1d0f9f1359191e718aea3f0a3b2"], 0x68}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000100037040200"/20, @ANYRES32=0x0, @ANYBLOB="c344050000000000480012800b000100697036746e6c00003800028008000700ff07000008000100", @ANYRES32=0x0, @ANYBLOB="0500090004000000050006000800000004002af2080014000200000008000800060000004963d373eb7977af286d62596da8063fcba9e87125f94a4a564ce466be4eca92715d6a612e1405935c458b9b426e3b000000006e38f3ca012b48a357b163fde08c40e21cb45f3f05361c002d8112644ca9651438c9ac24baa51e6592c62d56d52d0bf3052d7a57e7a425ce1820ca5d255c164f54eb480b4f0db93fea785c66f7611163e5359170791fea27a63e5a4a9b8ea1d0f9f1359191e718aea3f0a3b2"], 0x68}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) 2.42232292s ago: executing program 3 (id=269): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000000c0)=""/156, 0x9c) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000340)="f0964d440d33a4b2530494", &(0x7f00000003c0)=""/75}, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) set_mempolicy(0x8000, &(0x7f00000004c0)=0x9, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1008c54, &(0x7f0000000380), 0x1, 0x305, &(0x7f00000006c0)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000190001002bbd70000000000280200000fe01000500"], 0x2c}}, 0x0) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) read$eventfd(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x6, 0xe8a, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x875b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x0, [0x5, 0x0, 0xfffffff5]}, &(0x7f0000000300)=0x44) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_FLOW_MODE={0x0, 0x5, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_RAW={0xfffffffffffffdda, 0xc, 0x1}]}}]}, 0x54}}, 0x20000490) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0x9, 0x8) 2.091155926s ago: executing program 4 (id=271): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtIxk5nEZDLHpr8fvDnve96TeZ4nJ5nzHpiTAJ5ak9mXNOJIRJxPIsbr+9OIGKj2hiLWa8c9vH91NmtJVCpv/5ZEEhEP7l+dbbxWUt+O1gdDEXH7tST+/VFr3OXVtcWZcrm0VB8fX7l45fjy6torCxdnLpQulC6dmn711PTp6eku1nr3yntfPPPDG89fv/nx1JufH/ouibMxVp9rrqNbJmNy42fSrBARM90OlpO+ej3NdSaFHBMCAKCjtGkN998Yj754vHgbj29/zDU5AAAAoCsqfREVAAAA4IBL3P8DAADAAdf4HMCD+1dnGy3fTyT01r1zETFRq7/xfHNtphDr1e1Q9EfEyO9JND/WmtS+bc8ms0hff1/KWmz3HPJwFwJusn4tIv6/1flPqvVPVJ/ibq0/jYipLsSf3DTu9e/fXuo/24X4edcPwNPp1rnahaz1+pfW1j+DtdHm619hi2vXbuR9/Wus/x62rP/SjfVfX5v131s7jHH00Uu32801r//e/eTnuSx+tt1TUX/DvWsRRwtb1Z9s1J+0qf/8DmOMzt690W4uqz+rt9F6XX/lZsSx6mqutf6GpNP/Jzo+v1AuTdW+bvH6q6c7x28+/1nL4jfuBXohO/8jsbvzf2WHMSb+9+uRdnPb15/+MpC8U+0N1Pd8OLOysnQiYiB5vXX/yc65NI5pvEZW/4vPdf7736r+7D1hvf5zyH57rtW32fj6ppijx05+tfv691dW/9wuz/+nO4zx5Tc33m83l3f9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwZ0ogYiyQtbvTTtFiMGI2I/8RIWr68vPLy/OUPLs1lcxET0Z/OL5RLUxExXhsn2fhEtf94fHLTeDoiDkfEZ+PD1XFx9nJ5Lu/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DAaEWORpMWISCPij/E0LRbzzgoAAADouom8EwAAAAD2nft/AAAAOPha7v8LfxkN9TIXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqTDz966k0TE+pnhassM1Of6c80M2G/pzg4b2e88gN7ryzsBIDeFpn6lUqnkmArQY+7xgWSb+aG2M4NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf64Xjty6k0TE+pnhassM1Of6c80M2G9p3gkAuenrNJlsuwN4ghXyTgDIjXt8oLayf1SpaZ0favudg3uOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTY6zakrQYEWm1n6bFYsS/ImIi+pP5hXJpKiIORcRP4/2D2fhE3kkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQdcura4sz5XJpSUdHp4ud4ehZrOH6H3ObYwbbT3Xo5PzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALpZX1xZnyuXS0nLemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5W15dW5wpl0tL+9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzZwAAAP//0L4Jug==") r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) fchown(r3, 0xffffffffffffffff, 0xee01) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0xfffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.662859918s ago: executing program 4 (id=274): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b6, 0x8, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_setup(0x239f, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x9, 0x7e611d85, 0xc0c, 0xffffffffffff6d0a, 0xfffffffc, 0x2}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0) syz_io_uring_setup(0x102f8e, &(0x7f0000000000)={0x0, 0x2bdb, 0x0, 0xffffffff, 0x22d}, &(0x7f0000000200), &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$eJzs2s9rHGUYB/Bn0oTUlHQj/qIB8UUP6mVo4tVDgrQgBiraCFWRTs1El4y7YWcJrIjNSa/+CZ7Fozeh9OglF/8CD95yCXjpQRxpN7XdECFRmzX6+Vz2gWe+M+/svvvyHt7dV7/6ZGO9zteLfkxkWUwsxXbcyWIuJuK+7Xj5xWs/PPv2tXffWF5ZufRWSpeXry4sppTOP3frvc++ff52/9w7353/fjp25j7Y3Vv8eefpnQu7v139uF2ndp063X4q0o1ut1/cqMq01q438pTerMqiLlO7U5e9kf561d3cHKSiszY7s9kr6zoVnUHaKAep30393iAVHxXtTsrzPM3OBH/H6jd3mib2mqnr0TTNY1/Hudsx+1O0Ins8ZU8sZU9dz57Zzi7sNU1r3EPlkfD7/789tKifjai+3FrdWh1+DvvL69GOKsq4GK34Ne5Ok33D+vLrK5cupnvm4ovq5n7+5tbqmdH8QrRi7vD8wjCfRvPTMRMxFbGfX4xWPHl4fvHQ/Nl46YWHnp9HK378MLpRxVrczT7If76Q0mtXVg7k5+9dBwDwX5OnPxy6f8vzP+sP88fYHx7YX03G/OR4352IevDpRlFVZe80FFlEHOXiZvq4d37/1tHufNTizKn4eif/QmoiIspePXUqXvBRFPf/Of+W8fwDRUQs/fLKlfmR1njWI07Wg2kw7pEAAAAAAAAAAABwHCdxwHDkgc58AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/weAAD//63XxR4=") openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 1.645642149s ago: executing program 5 (id=275): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be5"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.576627312s ago: executing program 0 (id=276): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffaffffff07000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$AUDIT_USER_TTY(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0xcc, 0x464, 0x7ee137eced893e3, 0x70bd25, 0x25dfdbfc, "ecf8ff9e1f4848dc0eacb6e05e91e9078b7f3d43bbe4bcb3f0d0e61b8270a85b19dfe789d30088b9e1fd19a52d81fdaa6956932a17a241d0a06e49e4887248064f4a81d7cd027d8f2eb40a2a54b009ed61f534bfeb047b9ed92a693295777adb7f59245be1c30f37efd455804a1eacb6298125ea930c80a2c71e7819713a8531429e4d409a871270a0a3abff52bb70bdb44e7c9deabdcff3e33c061335a29a8454bb455d5a34dc2ea243bc1b451f646317127ca0aff5a6b051", ["", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x4000040) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r4, &(0x7f0000000240), 0x0}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_link_settings={0x0, 0x8, 0x3, 0xe, 0x4, 0x6, 0x1, 0x2, 0x2, 0xe, [0x4, 0xeaac, 0x0, 0x9f, 0xffff59f1, 0x7, 0x10001, 0x86f8], [0x9]}}) 1.473152497s ago: executing program 3 (id=277): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000276, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x625f00ac, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000276, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x625f00ac, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) (async) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/236, 0x46, 0xec, 0x6}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/236, 0x46, 0xec, 0x6}, 0x28) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 1.453466608s ago: executing program 5 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.148730473s ago: executing program 0 (id=279): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 950.363773ms ago: executing program 5 (id=280): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) (async) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x1843, 0x0) 934.554514ms ago: executing program 0 (id=281): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x7fc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb001}], 0x1c) r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x80004, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r2, 0xa, 'syzkaller\x00'}}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) io_setup(0x2, &(0x7f0000000280)) (async) io_setup(0x2, &(0x7f0000000280)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}]) (async) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$eJzs3M1vFOUfAPDvTF+AHy/tD/EFRK0Sk0ZDSwsqBy8aTTxgNNEDXkxqu5CGhRpajRAixRg8aGJI9Gw8mvgXeDMmRj2ZeNWLJ0NClAvoqWZ2Z8p224WW7naQ/XzCss+zM8vz/faZmX3mebYE0LWGsr+SiG0R8WtEDNSrS3cYqj9dv3pu8u+r5yaTWFh47c+ktt+1q+cmi12L923NK8NpRPphkjey1OyZsycmqtXK6bw+Onfy7dHZiP3vnpw4XjleOTV++PChg2PPPD3+VFvyzPK6tuf9mb27X3rj0suTRy+99ePXWbzb8u2NebTLUJb4Xws1zdseb3djJdveUE56SwyENemJiKy7+mrn/0D0xI3OG4gXPyg1OKCjss+mTa03zy8Ad7Ekyo4AKEfxQZ/d/xaPDRp63BGuPFe/Acryvp4/6lt6I8336Wu6v22noYg4Ov/PF9kjOjQPAQDQ6JPJz4/0N4w78uffb+xRL+7I11AGI+L/EbEzIu6JiF0RcW9E3BcR90fEAys38+aeVcazfPyTXr7N1FYlG/89m69tLR3/FaO/GOzJa9tr+fclx6arlQP5z2Q4+jZl9bGbtPHtC7982mpb4/gve2TtF2PBPI7LvU0TdFMTcxO1QWkbXLkQsad3pfyTxZWAJCJ2R8Rq+zC3oyhMP/HV3lY73Tr/m2jDOtPCl1l681n+89GUfyFZXJ88c3b/9LL1ydHNUa0cGC2OiuV++vniq63aX1f+bXClUn9u6P/mXQaTxvXa2bW3cfG3j1re09zm8Z/2J6/X1pn789fem5ibOz0W0Z8cqdWXvD5+471Fvdg/O/6H9y07/tPsz878PVn+D0ZEdhA/FBEPR8QjeeyPRsRjEbHvJvn/8HzrbUX+kZbU/xcipla8/i0e/039v/ZCz4nvv2nV/ur6/1CtNJy/Urv+3cJK4WSXi+YA1/OzAwAAgP+KtPYd+CQdWSyn6chI/Tv8u+J/aXVmdu7JYzPvnJqqf1d+MPrSYqZrIJ8PrU5XK2PJfP4v1udHx/O54mK+9GA+b/xZz5ZafWRypjpVcu7Q7ba2OP8zf/SUHR3QYVuKwpLTfby/lGCADda8jp4urZ5/JVwM4G7l97Whe93i/E83Kg5g4/n8h+610vl/vqluLQDuTj7/oXut6fz/uHNxABss/a7sCIASGf9DV1rP7/V3sLD5zgij+I8nNrb19XTKYKcjjCgKadm9o9DJQskXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDb5NwAA//+XduYy") 704.773465ms ago: executing program 5 (id=282): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000040000006007911c000000000000500003ab6a69e6b37267a16265912e7a07508fd00950074000000000000a6e98c71300012a972eb357ba06bf70000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 699.279655ms ago: executing program 5 (id=283): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x5, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") capset(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 300.276695ms ago: executing program 3 (id=284): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x20000400) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x78}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x0, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) set_mempolicy_home_node(&(0x7f00002a4000/0x2000)=nil, 0x2000, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000900000000050000029f00", @ANYRES32=0x0, @ANYBLOB="0600070003000000"], 0x28}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syncfs(r4) lseek(r4, 0x2000, 0x0) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc) 244.452928ms ago: executing program 0 (id=285): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) 244.045988ms ago: executing program 0 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x3) 132.487604ms ago: executing program 4 (id=287): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = syz_clone(0x1100011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r0, 0xdd8, &(0x7f0000000100)={0x13, 0xc, 0x8}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r3, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x5, 0x2, 0xffffffffffffffe0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 48.734708ms ago: executing program 3 (id=288): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x200001, @loopback, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="f10d01"], 0xa) 33.104678ms ago: executing program 2 (id=289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4a}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x24) r1 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffff81}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x2, 0xc0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0x7, 0x401}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e23, 0x21a, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffb0}], 0x3c) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r5, r6+10000000}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x3f2, 0x100, 0x70bd26, 0x25dfdbfb}, 0xffcf}, 0x1, 0x0, 0x0, 0x1157d27a16c047f5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x7b, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x1a, 0x8, 0x5f46d75e55e14328, &(0x7f0000000700)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x6, 0x6}, {0x3, 0x3}, {0xe, 0x3}, {0x3, 0x2}, {0x8, 0x4}, {0x2, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0xc, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30]}}, &(0x7f0000000580)=""/181, 0x72, 0xb5, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xb85, '\x00', r8, r9, 0x0, 0x2, 0x4}, 0x50) 2.7042ms ago: executing program 5 (id=290): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000002600)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030009000000002400118009000100626fe72fbc956ed4a2235b1e5c45068fa5f293d764000080080009"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x20040811) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) shutdown(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000002640)={{0x1, 0x1, 0x1018, r1}, './file0\x00'}) 0s ago: executing program 0 (id=291): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3, 0xfb, 0xfffffffc, 0xaa, 0x5, 0xffffffffffffffff}) waitid(0x1, r0, 0x0, 0x20000000, &(0x7f0000000180)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x9, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==0!|!') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000003c0)={0x87, 0x1b, '\x00', [@generic={0x61, 0xd0, "c2747e1f92d09240372664ebec7b4611451d3b1fb12f4beefdeb620b760fb6e1c329964f5fc4bdca4a189a77b1f8a3c9b0f2a4e7a3d3e6a7590795bf32b696d53038b73687f02f0bc50609fc08952d28ac2274a7e40106ceab80f21363d4da4c905e7e5ed8b575606cf0e03f879108d191491f26810d55e8fcccd3bf30f50d23b3c973c863d9cf44b612c0060b57d56067116efa17293e933bb66ad7f936beff3154f467b2f58fb256daeb6a58b59c20654241c552d9a505e84099ab5a2942636d338b4f997cbb0cc47032e9a6c168fa"}, @pad1, @padn={0x1, 0x1, [0x0]}]}, 0xe0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 34.422084][ T28] audit: type=1400 audit(1774304922.452:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.445125][ T28] audit: type=1400 audit(1774304922.472:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.446958][ T3307] cgroup: Unknown subsys name 'net' [ 34.472774][ T28] audit: type=1400 audit(1774304922.502:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.591334][ T3307] cgroup: Unknown subsys name 'cpuset' [ 34.597443][ T3307] cgroup: Unknown subsys name 'rlimit' [ 34.708084][ T28] audit: type=1400 audit(1774304922.732:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.734062][ T28] audit: type=1400 audit(1774304922.732:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.759263][ T28] audit: type=1400 audit(1774304922.732:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.780043][ T28] audit: type=1400 audit(1774304922.732:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.796292][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.800917][ T28] audit: type=1400 audit(1774304922.732:69): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.833656][ T28] audit: type=1400 audit(1774304922.732:70): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.857273][ T28] audit: type=1400 audit(1774304922.762:71): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.857710][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.093360][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.140379][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.183968][ T3332] chnl_net:caif_netlink_parms(): no params data found [ 36.217750][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 36.239995][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.257896][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.265168][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.272550][ T3319] bridge_slave_0: entered allmulticast mode [ 36.278878][ T3319] bridge_slave_0: entered promiscuous mode [ 36.298729][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.305936][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.313104][ T3319] bridge_slave_1: entered allmulticast mode [ 36.319596][ T3319] bridge_slave_1: entered promiscuous mode [ 36.347637][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.361632][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.368698][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.375983][ T3321] bridge_slave_0: entered allmulticast mode [ 36.382613][ T3321] bridge_slave_0: entered promiscuous mode [ 36.401731][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.410995][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.418156][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.425294][ T3321] bridge_slave_1: entered allmulticast mode [ 36.431753][ T3321] bridge_slave_1: entered promiscuous mode [ 36.466440][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.473629][ T3332] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.480865][ T3332] bridge_slave_0: entered allmulticast mode [ 36.487276][ T3332] bridge_slave_0: entered promiscuous mode [ 36.499130][ T3319] team0: Port device team_slave_0 added [ 36.511536][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.518717][ T3332] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.525956][ T3332] bridge_slave_1: entered allmulticast mode [ 36.532463][ T3332] bridge_slave_1: entered promiscuous mode [ 36.539910][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.550221][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.560338][ T3319] team0: Port device team_slave_1 added [ 36.579847][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.586967][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.594131][ T3327] bridge_slave_0: entered allmulticast mode [ 36.600450][ T3327] bridge_slave_0: entered promiscuous mode [ 36.625453][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.632709][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.639815][ T3327] bridge_slave_1: entered allmulticast mode [ 36.646185][ T3327] bridge_slave_1: entered promiscuous mode [ 36.661243][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.668393][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.675738][ T3323] bridge_slave_0: entered allmulticast mode [ 36.682362][ T3323] bridge_slave_0: entered promiscuous mode [ 36.689804][ T3332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.704577][ T3321] team0: Port device team_slave_0 added [ 36.715619][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.722629][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.748756][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.759505][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.766588][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.773755][ T3323] bridge_slave_1: entered allmulticast mode [ 36.780194][ T3323] bridge_slave_1: entered promiscuous mode [ 36.787355][ T3332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.797159][ T3321] team0: Port device team_slave_1 added [ 36.804073][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.813554][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.820523][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.846514][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.875946][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.893642][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.918130][ T3327] team0: Port device team_slave_0 added [ 36.924559][ T3332] team0: Port device team_slave_0 added [ 36.930790][ T3327] team0: Port device team_slave_1 added [ 36.937393][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.951452][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.958395][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.984591][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.996300][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.003382][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.029425][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.041001][ T3332] team0: Port device team_slave_1 added [ 37.065751][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.072737][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.098745][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.118571][ T3323] team0: Port device team_slave_0 added [ 37.135410][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.142433][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.168412][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.187512][ T3323] team0: Port device team_slave_1 added [ 37.195546][ T3319] hsr_slave_0: entered promiscuous mode [ 37.201706][ T3319] hsr_slave_1: entered promiscuous mode [ 37.214776][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.221994][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.248041][ T3332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.269643][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.276637][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.302721][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.318222][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.325293][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.351290][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.362413][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.369369][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.395836][ T3332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.409616][ T3321] hsr_slave_0: entered promiscuous mode [ 37.415623][ T3321] hsr_slave_1: entered promiscuous mode [ 37.421667][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.427396][ T3321] Cannot create hsr debugfs directory [ 37.469038][ T3327] hsr_slave_0: entered promiscuous mode [ 37.475099][ T3327] hsr_slave_1: entered promiscuous mode [ 37.480949][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 37.486670][ T3327] Cannot create hsr debugfs directory [ 37.544558][ T3332] hsr_slave_0: entered promiscuous mode [ 37.550537][ T3332] hsr_slave_1: entered promiscuous mode [ 37.556447][ T3332] debugfs: 'hsr0' already exists in 'hsr' [ 37.562262][ T3332] Cannot create hsr debugfs directory [ 37.596408][ T3323] hsr_slave_0: entered promiscuous mode [ 37.602541][ T3323] hsr_slave_1: entered promiscuous mode [ 37.608367][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 37.614135][ T3323] Cannot create hsr debugfs directory [ 37.762050][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.773299][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.782141][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.791220][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.820086][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.833111][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.842794][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.851824][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.884078][ T3327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.899826][ T3327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.908360][ T3327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.917297][ T3327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.947072][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.960042][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.969771][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.989228][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.004534][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.021493][ T3332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.031243][ T3332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.040671][ T3332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.056655][ T3332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.079152][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.092351][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.116408][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.130146][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.137207][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.145904][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.153025][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.175193][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.182300][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.193386][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.200521][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.209374][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.235544][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.251744][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.264844][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.271967][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.290077][ T1875] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.297138][ T1875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.315393][ T3332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.333975][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.344818][ T3332] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.370018][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.377157][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.387842][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.395032][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.419499][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.426628][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.437775][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.444910][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.469349][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.482807][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.498524][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.539830][ T3332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.551868][ T3332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.576673][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.603803][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.696142][ T3332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.707059][ T3319] veth0_vlan: entered promiscuous mode [ 38.741146][ T3321] veth0_vlan: entered promiscuous mode [ 38.759263][ T3323] veth0_vlan: entered promiscuous mode [ 38.772311][ T3319] veth1_vlan: entered promiscuous mode [ 38.782439][ T3321] veth1_vlan: entered promiscuous mode [ 38.802138][ T3323] veth1_vlan: entered promiscuous mode [ 38.815806][ T3321] veth0_macvtap: entered promiscuous mode [ 38.828843][ T3323] veth0_macvtap: entered promiscuous mode [ 38.845751][ T3321] veth1_macvtap: entered promiscuous mode [ 38.856377][ T3323] veth1_macvtap: entered promiscuous mode [ 38.875194][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.885854][ T3332] veth0_vlan: entered promiscuous mode [ 38.891793][ T3327] veth0_vlan: entered promiscuous mode [ 38.899222][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.907667][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.921439][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.934042][ T3319] veth0_macvtap: entered promiscuous mode [ 38.942338][ T3332] veth1_vlan: entered promiscuous mode [ 38.948946][ T3327] veth1_vlan: entered promiscuous mode [ 38.955309][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.964273][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.978034][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.986890][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.001454][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.011253][ T3319] veth1_macvtap: entered promiscuous mode [ 39.019393][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.028296][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.045147][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.069920][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.079590][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.100098][ T3327] veth0_macvtap: entered promiscuous mode [ 39.108350][ T3332] veth0_macvtap: entered promiscuous mode [ 39.115985][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.127298][ T3327] veth1_macvtap: entered promiscuous mode [ 39.138906][ T3332] veth1_macvtap: entered promiscuous mode [ 39.155174][ T3490] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 39.179122][ T1875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.192025][ T3490] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 39.193781][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.211497][ T1875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.227325][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.240528][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.250006][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.258171][ T1875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.268658][ T1875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.286931][ C0] hrtimer: interrupt took 30328 ns [ 39.304064][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.311301][ T3490] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.319625][ T3494] loop1: detected capacity change from 0 to 512 [ 39.339087][ T3494] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 39.360500][ T3494] EXT4-fs (loop1): 1 truncate cleaned up [ 39.371519][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.378967][ T3494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.381919][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.421494][ T1875] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.434293][ T1875] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.473916][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.481952][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 39.481963][ T28] audit: type=1400 audit(1774304927.512:113): avc: denied { create } for pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.509014][ T28] audit: type=1400 audit(1774304927.512:114): avc: denied { allowed } for pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.509449][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.537971][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.547258][ T28] audit: type=1400 audit(1774304927.562:115): avc: denied { create } for pid=3499 comm="syz.0.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.568970][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.578399][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.587704][ T28] audit: type=1400 audit(1774304927.562:116): avc: denied { map } for pid=3499 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.611744][ T28] audit: type=1400 audit(1774304927.562:117): avc: denied { read write } for pid=3499 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.637901][ T28] audit: type=1400 audit(1774304927.612:118): avc: denied { read write } for pid=3499 comm="syz.0.1" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.666313][ T28] audit: type=1400 audit(1774304927.612:119): avc: denied { open } for pid=3499 comm="syz.0.1" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.690564][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.699638][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.711076][ T28] audit: type=1400 audit(1774304927.612:120): avc: denied { ioctl } for pid=3499 comm="syz.0.1" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.736135][ T28] audit: type=1400 audit(1774304927.742:121): avc: denied { write } for pid=3499 comm="syz.0.1" name="config" dev="proc" ino=4026532502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.758908][ T28] audit: type=1400 audit(1774304927.742:122): avc: denied { map_create } for pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.778557][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.787573][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.791980][ T3505] loop1: detected capacity change from 0 to 1024 [ 39.831444][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.841760][ T3505] ======================================================= [ 39.841760][ T3505] WARNING: The mand mount option has been deprecated and [ 39.841760][ T3505] and is ignored by this kernel. Remove the mand [ 39.841760][ T3505] option from the mount to silence this warning. [ 39.841760][ T3505] ======================================================= [ 39.880904][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.891720][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.954910][ T3505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.980090][ T3513] 9p: Could not find request transport: fd0x0000000000000006 [ 39.980495][ T3505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.004785][ T3516] loop2: detected capacity change from 0 to 512 [ 40.042112][ T3516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.063472][ T3512] loop4: detected capacity change from 0 to 1024 [ 40.070822][ T69] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.087491][ T3516] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.136063][ T3509] loop3: detected capacity change from 0 to 512 [ 40.139771][ T3512] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 40.149427][ T3509] msdos: Unknown parameter 'dos1xfloppyocase' [ 40.165205][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.183365][ T3509] capability: warning: `syz.3.8' uses deprecated v2 capabilities in a way that may be insecure [ 40.183975][ T3505] loop1: detected capacity change from 0 to 8192 [ 40.201458][ T3512] System zones: 0-1, 3-36 [ 40.211589][ T3512] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5: bad orphan inode 134217728 [ 40.223162][ T3512] loop4: lost filesystem error report for type 5 error -117 [ 40.238241][ T3512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.275213][ T3311] loop1: p1 p2 p4[DM] [ 40.279386][ T3311] loop1: p1 size 67898881 extends beyond EOD, truncated [ 40.295187][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.305370][ T3523] binfmt_misc: register: failed to install interpreter file ./file1 [ 40.314767][ T3311] loop1: p4 size 262144 extends beyond EOD, truncated [ 40.336867][ T3525] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.344445][ T3505] loop1: p1 p2 p4[DM] [ 40.350216][ T3505] loop1: p1 size 67898881 extends beyond EOD, truncated [ 40.372413][ T3505] loop1: p4 size 262144 extends beyond EOD, truncated [ 40.522407][ T3534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.577801][ T3538] loop0: detected capacity change from 0 to 128 [ 40.590398][ T3534] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 40.620501][ T3512] syz.4.5 (3512) used greatest stack depth: 10248 bytes left [ 40.624260][ T3538] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.640252][ T3538] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.660483][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.683828][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.736282][ T3543] loop3: detected capacity change from 0 to 2048 [ 40.828097][ T3543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.192025][ T3556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 41.312050][ T3567] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 41.670249][ T3577] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 41.759303][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.838614][ T3596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21'. [ 42.026730][ T3603] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22'. [ 42.140736][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 42.204415][ T3605] loop2: detected capacity change from 0 to 512 [ 42.230752][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.271136][ T3605] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 42.332649][ T3605] EXT4-fs (loop2): 1 truncate cleaned up [ 42.369567][ T3605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.431333][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.455570][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 42.565100][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.583380][ T3619] loop4: detected capacity change from 0 to 128 [ 42.622520][ T3621] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.653132][ T3621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.673633][ T3621] EXT4-fs (loop0): orphan file too big: 4294967295 [ 42.680214][ T3621] EXT4-fs (loop0): mount failed [ 42.851699][ T3630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.29'. [ 42.902501][ T3630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.29'. [ 42.920871][ T3630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.29'. [ 43.025819][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.033096][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.099758][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.109696][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.259055][ T2089] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.305073][ T2089] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.338072][ T2089] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.379653][ T2089] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.544525][ T3640] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.565689][ T3652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.615807][ T3654] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.682853][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.301945][ T3313] loop3: p1 < > p2 p4 < p5 > [ 44.316867][ T3313] loop3: partition table partially beyond EOD, truncated [ 44.335186][ T3313] loop3: p1 start 134217728 is beyond EOD, truncated [ 44.341577][ T3650] syz.1.35 (3650) used greatest stack depth: 10080 bytes left [ 44.370717][ T3313] loop3: p2 size 591360 extends beyond EOD, truncated [ 44.402275][ T3313] loop3: p5 size 591360 extends beyond EOD, truncated [ 44.412755][ T3665] loop3: p1 < > p2 p4 < p5 > [ 44.417550][ T3665] loop3: partition table partially beyond EOD, truncated [ 44.426445][ T3666] capability: warning: `syz.3.39' uses 32-bit capabilities (legacy support in use) [ 44.435512][ T3665] loop3: p1 start 134217728 is beyond EOD, truncated [ 44.476163][ T3665] loop3: p2 size 591360 extends beyond EOD, truncated [ 44.532905][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 44.532916][ T28] audit: type=1400 audit(1774304932.562:182): avc: denied { kexec_image_load } for pid=3663 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 44.536974][ T3665] loop3: p5 size 591360 extends beyond EOD, [ 44.600265][ T3670] set_capacity_and_notify: 7 callbacks suppressed [ 44.600281][ T3670] loop0: detected capacity change from 0 to 1024 [ 44.601840][ T3671] loop1: detected capacity change from 0 to 512 [ 44.625950][ T28] audit: type=1400 audit(1774304932.622:183): avc: denied { create } for pid=3668 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.692698][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.711299][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.719490][ T3665] truncated [ 44.740918][ T69] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.826264][ T3671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.838030][ T3670] loop0: detected capacity change from 0 to 8192 [ 44.920889][ T3311] loop0: p1 p2 p4[DM] [ 44.925210][ T3311] loop0: p1 size 67898881 extends beyond EOD, truncated [ 44.933501][ T3311] loop0: p4 size 262144 extends beyond EOD, truncated [ 44.954671][ T3670] loop0: p1 p2 p4[DM] [ 44.958979][ T3670] loop0: p1 size 67898881 extends beyond EOD, truncated [ 44.967761][ T3670] loop0: p4 size 262144 extends beyond EOD, truncated [ 45.005345][ T28] audit: type=1400 audit(1774304932.622:184): avc: denied { write } for pid=3668 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.039908][ T3671] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.41: bg 0: block 393: padding at end of block bitmap is not set [ 45.060921][ T3670] binfmt_misc: register: failed to install interpreter file ./file1 [ 45.069875][ T3671] loop1: lost filesystem error report for type 5 error -117 [ 45.070720][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 45.084481][ C0] EXT4-fs (loop1): initial error at time 1774304933: ext4_validate_block_bitmap:441 [ 45.093896][ C0] EXT4-fs (loop1): last error at time 1774304933: ext4_validate_block_bitmap:441 [ 45.125988][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 45.143430][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 45.154127][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 45.169163][ T3671] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 45.191591][ T3671] loop1: lost filesystem error report for type 5 error -117 [ 45.194842][ T3671] EXT4-fs (loop1): 2 truncates cleaned up [ 45.208797][ T3671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.224792][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 45.227937][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 45.245456][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 45.262060][ T28] audit: type=1400 audit(1774304933.282:185): avc: denied { module_request } for pid=3676 comm="syz.3.42" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.305164][ T3677] loop3: detected capacity change from 0 to 512 [ 45.324181][ T3677] EXT4-fs (loop3): 1 orphan inode deleted [ 45.330212][ T3677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.330835][ T28] audit: type=1400 audit(1774304933.292:186): avc: denied { create } for pid=3668 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.361268][ T3677] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.373323][ T69] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 45.390773][ T69] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 45.401318][ T28] audit: type=1400 audit(1774304933.292:187): avc: denied { write } for pid=3668 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.450489][ T28] audit: type=1400 audit(1774304933.292:188): avc: denied { mount } for pid=3668 comm="syz.1.41" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.483376][ T28] audit: type=1400 audit(1774304933.292:189): avc: denied { search } for pid=3668 comm="syz.1.41" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.539348][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.549278][ T28] audit: type=1400 audit(1774304933.292:190): avc: denied { setattr } for pid=3668 comm="syz.1.41" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.577665][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.624136][ T3682] ieee802154 phy0 wpan0: encryption failed: -90 [ 45.690549][ T3687] Zero length message leads to an empty skb [ 45.743580][ T3689] loop1: detected capacity change from 0 to 512 [ 45.764076][ T3689] EXT4-fs (loop1): 1 orphan inode deleted [ 45.780815][ T3689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.810999][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 45.882859][ T12] loop1: lost filesystem error report for type 5 error -117 [ 45.897785][ T3689] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.993727][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.658193][ T3700] mmap: syz.3.48 (3700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.792415][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.798833][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 47.175789][ T3705] loop1: detected capacity change from 0 to 512 [ 47.206705][ T3705] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.251207][ T3705] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.269986][ T3705] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 47.288549][ T3705] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.49: attempt to clear invalid blocks 2 len 1 [ 47.310738][ T3705] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.320731][ T3705] EXT4-fs (loop1): Remounting filesystem read-only [ 47.336403][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 47.336416][ C1] EXT4-fs (loop1): initial error at time 1774304935: ext4_clear_blocks:876: inode 13 [ 47.336438][ C1] EXT4-fs (loop1): last error at time 1774304935: ext4_clear_blocks:876: inode 13 [ 47.451045][ T3705] EXT4-fs (loop1): 1 truncate cleaned up [ 47.457018][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.548631][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.767386][ T3718] netlink: 'syz.0.53': attribute type 29 has an invalid length. [ 47.784783][ T3718] __nla_validate_parse: 136 callbacks suppressed [ 47.784893][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 48.060006][ T3721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.55'. [ 48.149828][ T3734] loop4: detected capacity change from 0 to 512 [ 48.184039][ T3734] EXT4-fs (loop4): 1 orphan inode deleted [ 48.210087][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 48.231290][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.243907][ T12] loop4: lost filesystem error report for type 5 error -117 [ 48.270833][ T3734] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.351231][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.470950][ T3743] loop1: detected capacity change from 0 to 512 [ 48.478552][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 48.498905][ T3743] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 48.507454][ T3743] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.521735][ T3743] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.585207][ T3746] netlink: 92 bytes leftover after parsing attributes in process `syz.0.61'. [ 48.594523][ T3743] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 48.605882][ T3746] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 48.616220][ T3743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.60: bg 0: block 15: invalid block bitmap [ 48.632944][ T3746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.61'. [ 48.648831][ T3743] loop1: lost filesystem error report for type 5 error -117 [ 48.649008][ T3743] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 48.656326][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 48.656352][ C1] EXT4-fs (loop1): initial error at time 1774304936: ext4_validate_block_bitmap:432 [ 48.656380][ C1] EXT4-fs (loop1): last error at time 1774304936: ext4_validate_block_bitmap:432 [ 48.711335][ T3746] netlink: 44 bytes leftover after parsing attributes in process `syz.0.61'. [ 48.727216][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.734461][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.040929][ T3743] loop1: lost filesystem error report for type 5 error -117 [ 49.088478][ T3757] loop3: detected capacity change from 0 to 128 [ 49.176453][ T3757] sctp: [Deprecated]: syz.3.63 (pid 3757) Use of int in maxseg socket option. [ 49.176453][ T3757] Use struct sctp_assoc_value instead [ 49.218986][ T3743] EXT4-fs (loop1): 1 truncate cleaned up [ 49.226195][ T3743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.370328][ T3743] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 49.493372][ T3743] netlink: 'syz.1.60': attribute type 13 has an invalid length. [ 49.563899][ T3754] loop0: detected capacity change from 0 to 164 [ 49.572904][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 49.572958][ T28] audit: type=1400 audit(1774304937.602:224): avc: denied { mount } for pid=3748 comm="syz.0.62" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.612540][ T28] audit: type=1400 audit(1774304937.632:225): avc: denied { remount } for pid=3748 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.778207][ T28] audit: type=1400 audit(1774304937.792:226): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.778245][ T3764] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.779065][ T3764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3764 comm=syz.2.65 [ 49.822679][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.837269][ T28] audit: type=1400 audit(1774304937.852:227): avc: denied { read } for pid=3760 comm="syz.4.64" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.954353][ T28] audit: type=1400 audit(1774304937.852:228): avc: denied { open } for pid=3760 comm="syz.4.64" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.997396][ T3778] loop1: detected capacity change from 0 to 512 [ 50.006669][ T3779] loop2: detected capacity change from 0 to 512 [ 50.091453][ T3778] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.122276][ T28] audit: type=1400 audit(1774304937.912:229): avc: denied { name_bind } for pid=3765 comm="syz.0.66" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.144052][ T28] audit: type=1400 audit(1774304937.942:230): avc: denied { write } for pid=3768 comm="syz.1.67" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.147846][ T3779] EXT4-fs (loop2): 1 orphan inode deleted [ 50.167255][ T28] audit: type=1400 audit(1774304937.942:231): avc: denied { open } for pid=3768 comm="syz.1.67" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.181214][ T3778] EXT4-fs (loop1): orphan file too big: 4294967295 [ 50.207171][ T69] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 50.223667][ T69] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 50.231517][ T3779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.235404][ T69] loop2: lost filesystem error report for type 5 error -117 [ 50.259140][ T3778] EXT4-fs (loop1): mount failed [ 50.279035][ T3787] loop3: detected capacity change from 0 to 1024 [ 50.289434][ T3787] EXT4-fs: test_dummy_encryption option not supported [ 50.295380][ T3779] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.358098][ T3789] loop4: detected capacity change from 0 to 2048 [ 50.365385][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.409929][ T3793] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.430887][ T28] audit: type=1400 audit(1774304938.452:232): avc: denied { connect } for pid=3792 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.491279][ T3789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.503932][ T3789] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.553239][ T3787] loop3: detected capacity change from 0 to 512 [ 52.316867][ T3787] EXT4-fs (loop3): 1 orphan inode deleted [ 52.331044][ T3787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.344777][ T3787] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.381193][ T3787] syz.3.71 (3787) used greatest stack depth: 9800 bytes left [ 52.467914][ T3782] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 52.482567][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 52.494433][ T3782] EXT4-fs (loop4): Remounting filesystem read-only [ 52.503007][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.514175][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.530965][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 52.542098][ T3814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 52.650494][ T3832] netdevsim netdevsim0 ì: renamed from netdevsim0 (while UP) [ 52.684703][ T3835] loop3: detected capacity change from 0 to 512 [ 52.722996][ T3835] EXT4-fs (loop3): 1 orphan inode deleted [ 52.733666][ T3835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.754984][ T3835] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.765807][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 52.792776][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.990281][ T3879] loop3: detected capacity change from 0 to 512 [ 53.008434][ T3879] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 53.032964][ T3879] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.039869][ T3879] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.90: Block bitmap for bg 0 marked uninitialized [ 53.055809][ T3879] loop3: lost filesystem error report for type 5 error -117 [ 53.055986][ T3879] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 53.072096][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 53.072109][ C0] EXT4-fs (loop3): initial error at time 1774304941: ext4_read_block_bitmap_nowait:517 [ 53.072133][ C0] EXT4-fs (loop3): last error at time 1774304941: ext4_read_block_bitmap_nowait:517 [ 53.141329][ T3879] loop3: lost filesystem error report for type 5 error -117 [ 53.141617][ T3879] EXT4-fs (loop3): 1 orphan inode deleted [ 53.155819][ T3879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.171196][ T3879] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 53.223231][ T3879] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 53.451377][ T3879] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.90: Block bitmap for bg 0 marked uninitialized [ 53.485066][ T3879] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.90: Block bitmap for bg 0 marked uninitialized [ 53.506082][ T3899] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.90: Block bitmap for bg 0 marked uninitialized [ 53.548295][ T3879] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.90: Block bitmap for bg 0 marked uninitialized [ 53.563141][ T3879] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.90: Block bitmap for bg 0 marked uninitialized [ 53.577093][ T3879] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.90: Block bitmap for bg 0 marked uninitialized [ 53.594877][ T3879] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.90: Block bitmap for bg 0 marked uninitialized [ 53.636289][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.985654][ T3902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.96'. [ 54.035152][ T3902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 54.050234][ T3903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.96'. [ 54.067599][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 54.110257][ T3901] loop3: detected capacity change from 0 to 32768 [ 54.215379][ T3905] loop0: detected capacity change from 0 to 512 [ 54.227377][ T3910] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.282051][ T3912] lo: Caught tx_queue_len zero misconfig [ 54.297855][ T3905] EXT4-fs (loop0): 1 orphan inode deleted [ 54.322460][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 54.338457][ T3905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.360614][ T3914] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.387186][ T50] loop0: lost filesystem error report for type 5 error -117 [ 54.394437][ T3923] loop1: detected capacity change from 0 to 512 [ 54.401717][ T3905] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.429168][ T3923] EXT4-fs: Ignoring removed bh option [ 54.465322][ T3923] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.479171][ T3923] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 54.491134][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.510116][ T3923] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.522241][ T3923] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.538762][ T3923] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.113: Failed to acquire dquot type 1 [ 54.550573][ T3923] loop1: lost filesystem error report for type 5 error -5 [ 54.550800][ T3923] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.113: Invalid block bitmap block 0 in block_group 0 [ 54.557973][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 54.557985][ C1] EXT4-fs (loop1): last error at time 1774304942: ext4_acquire_dquot:7001 [ 54.616619][ T3923] loop1: lost filesystem error report for type 5 error -117 [ 54.616952][ T3923] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.113: Invalid block bitmap block 0 in block_group 0 [ 54.650386][ T3938] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 54.717407][ T3938] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.724720][ T3938] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.737910][ T3923] loop1: lost filesystem error report for type 5 error -117 [ 54.801899][ T3938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.821113][ T3938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.855689][ T3923] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.113: Invalid block bitmap block 0 in block_group 0 [ 54.870378][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 54.870399][ T28] audit: type=1400 audit(1774304942.730:267): avc: denied { getopt } for pid=3926 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.900852][ T3923] loop1: lost filesystem error report for type 5 error -117 [ 54.901146][ T3923] Quota error (device loop1): write_blk: dquota write failed [ 55.047245][ T3923] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 55.057377][ T3923] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.113: Failed to acquire dquot type 1 [ 55.070108][ T3923] loop1: lost filesystem error report for type 5 error -28 [ 55.070932][ T3923] Quota error (device loop1): write_blk: dquota write failed [ 55.086097][ T3923] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 55.709573][ T3923] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.113: Failed to acquire dquot type 1 [ 55.721092][ T3923] loop1: lost filesystem error report for type 5 error -28 [ 55.721352][ T3923] EXT4-fs (loop1): 1 orphan inode deleted [ 55.794789][ T3923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.814838][ T3942] netlink: 'syz.4.106': attribute type 29 has an invalid length. [ 55.822857][ T69] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.831854][ T69] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.842465][ T69] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.851480][ T69] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.887934][ T3923] syz.1.113 (3923) used greatest stack depth: 8928 bytes left [ 55.913414][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 55.942014][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.995021][ T3957] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.004731][ T3949] loop0: detected capacity change from 0 to 8192 [ 56.055912][ T28] audit: type=1400 audit(1774304943.834:268): avc: denied { create } for pid=3959 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.149129][ T3961] FAULT_INJECTION: forcing a failure. [ 56.149129][ T3961] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.163406][ T3961] CPU: 1 UID: 0 PID: 3961 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(full) [ 56.163430][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.163446][ T3961] Call Trace: [ 56.163451][ T3961] [ 56.163456][ T3961] __dump_stack+0x1d/0x30 [ 56.163490][ T3961] dump_stack_lvl+0x95/0xd0 [ 56.163539][ T3961] dump_stack+0x15/0x1b [ 56.163562][ T3961] should_fail_ex+0x263/0x280 [ 56.163591][ T3961] should_fail+0xb/0x20 [ 56.163611][ T3961] should_fail_usercopy+0x1a/0x20 [ 56.163661][ T3961] _copy_from_user+0x1c/0xb0 [ 56.163688][ T3961] memdup_user+0x5e/0xd0 [ 56.163704][ T3961] strndup_user+0x68/0xb0 [ 56.163759][ T3961] __se_sys_mount+0x4d/0x2e0 [ 56.163781][ T3961] __x64_sys_mount+0x67/0x80 [ 56.163800][ T3961] x64_sys_call+0x2d61/0x3020 [ 56.163845][ T3961] do_syscall_64+0x12c/0x370 [ 56.163934][ T3961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.164019][ T3961] RIP: 0033:0x7fefab8dc799 [ 56.164100][ T3961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.164129][ T3961] RSP: 002b:00007fefaa2ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.164146][ T3961] RAX: ffffffffffffffda RBX: 00007fefabb56180 RCX: 00007fefab8dc799 [ 56.164157][ T3961] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 56.164180][ T3961] RBP: 00007fefaa2ed090 R08: 0000200000000540 R09: 0000000000000000 [ 56.164201][ T3961] R10: 0000000000010044 R11: 0000000000000246 R12: 0000000000000001 [ 56.164212][ T3961] R13: 00007fefabb56218 R14: 00007fefabb56180 R15: 00007fff8a3e4318 [ 56.164230][ T3961] [ 56.565614][ T28] audit: type=1400 audit(1774304943.871:269): avc: denied { allowed } for pid=3950 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.638313][ T3969] loop4: detected capacity change from 0 to 512 [ 56.683757][ T28] audit: type=1400 audit(1774304944.114:270): avc: denied { remount } for pid=3947 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.703386][ T28] audit: type=1400 audit(1774304944.124:271): avc: denied { create } for pid=3947 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.722910][ T28] audit: type=1400 audit(1774304944.124:272): avc: denied { ioctl } for pid=3947 comm="syz.0.108" path="socket:[6440]" dev="sockfs" ino=6440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.758989][ T3970] loop2: detected capacity change from 0 to 512 [ 56.783085][ T3970] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.117: invalid indirect mapped block 256 (level 2) [ 56.808306][ T3969] EXT4-fs (loop4): 1 orphan inode deleted [ 56.822731][ T3970] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.823272][ T3969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.832512][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 56.832526][ C0] EXT4-fs (loop2): initial error at time 1774304944: ext4_free_branches:1023: inode 11 [ 56.832553][ C0] EXT4-fs (loop2): last error at time 1774304944: ext4_free_branches:1023: inode 11 [ 56.872444][ T3970] EXT4-fs (loop2): 2 truncates cleaned up [ 56.872459][ T3969] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.877662][ T69] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 56.878981][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.928623][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 56.928649][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.937871][ T3970] bond0: option lp_interval: invalid value (18446744072127363710) [ 56.954498][ T3970] bond0: option lp_interval: allowed values 1 - 2147483647 [ 56.988271][ T3991] netlink: 'syz.4.121': attribute type 10 has an invalid length. [ 56.996980][ T3991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.004999][ T3991] team0: Port device bond0 added [ 57.030264][ T3993] loop1: detected capacity change from 0 to 1024 [ 57.041196][ T3993] EXT4-fs: Ignoring removed nobh option [ 57.050833][ T3993] EXT4-fs: Ignoring removed bh option [ 57.068060][ T3993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.092170][ T3993] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 57.110942][ T3993] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 57.132843][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.173689][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.261817][ T4012] loop3: detected capacity change from 0 to 512 [ 57.271333][ T4012] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.285402][ T4012] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 57.331807][ T4015] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.348788][ T4005] netlink: 44 bytes leftover after parsing attributes in process `syz.1.126'. [ 57.419281][ T4018] loop1: detected capacity change from 0 to 512 [ 57.473323][ T4018] EXT4-fs (loop1): 1 orphan inode deleted [ 57.480297][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.493248][ T4018] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.523989][ T1441] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 57.541832][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.336514][ T4030] FAULT_INJECTION: forcing a failure. [ 59.336514][ T4030] name failslab, interval 1, probability 0, space 0, times 0 [ 59.349644][ T4030] CPU: 1 UID: 0 PID: 4030 Comm: syz.1.134 Not tainted syzkaller #0 PREEMPT(full) [ 59.349711][ T4030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.349722][ T4030] Call Trace: [ 59.349727][ T4030] [ 59.349733][ T4030] __dump_stack+0x1d/0x30 [ 59.349756][ T4030] dump_stack_lvl+0x95/0xd0 [ 59.349782][ T4030] dump_stack+0x15/0x1b [ 59.349852][ T4030] should_fail_ex+0x263/0x280 [ 59.349878][ T4030] ? __se_sys_mount+0xef/0x2e0 [ 59.349944][ T4030] should_failslab+0x8c/0xb0 [ 59.349967][ T4030] __kmalloc_cache_noprof+0x5f/0x410 [ 59.349993][ T4030] ? memdup_user+0x99/0xd0 [ 59.350016][ T4030] __se_sys_mount+0xef/0x2e0 [ 59.350097][ T4030] ? fput+0x8f/0xc0 [ 59.350123][ T4030] ? ksys_write+0x194/0x1a0 [ 59.350140][ T4030] __x64_sys_mount+0x67/0x80 [ 59.350158][ T4030] x64_sys_call+0x2d61/0x3020 [ 59.350206][ T4030] do_syscall_64+0x12c/0x370 [ 59.350258][ T4030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.350284][ T4030] RIP: 0033:0x7fb39241c799 [ 59.350301][ T4030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.350317][ T4030] RSP: 002b:00007fb390e35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.350333][ T4030] RAX: ffffffffffffffda RBX: 00007fb392696180 RCX: 00007fb39241c799 [ 59.350416][ T4030] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 59.350431][ T4030] RBP: 00007fb390e35090 R08: 0000200000000540 R09: 0000000000000000 [ 59.350444][ T4030] R10: 0000000000010044 R11: 0000000000000246 R12: 0000000000000001 [ 59.350454][ T4030] R13: 00007fb392696218 R14: 00007fb392696180 R15: 00007fffec1977c8 [ 59.350491][ T4030] [ 59.631038][ T4044] process 'syz.3.139' launched './file1' with NULL argv: empty string added [ 59.682249][ T4055] loop3: detected capacity change from 0 to 512 [ 59.691592][ T4051] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 59.764670][ T4055] EXT4-fs (loop3): 1 orphan inode deleted [ 59.774307][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.796633][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 59.818227][ T30] loop3: lost filesystem error report for type 5 error -117 [ 59.826402][ T4055] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.867135][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.908259][ T4074] loop0: detected capacity change from 0 to 512 [ 59.919979][ T4069] loop1: detected capacity change from 0 to 1024 [ 59.926746][ T4069] EXT4-fs: Ignoring removed bh option [ 59.932285][ T4069] EXT4-fs: Ignoring removed oldalloc option [ 59.938373][ T4069] EXT4-fs: Ignoring removed nobh option [ 59.952706][ T4074] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 59.961128][ T4074] EXT4-fs (loop0): orphan cleanup on readonly fs [ 59.968255][ T4074] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.994457][ T4069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.010832][ T4072] syzkaller0: entered promiscuous mode [ 60.016359][ T4072] syzkaller0: entered allmulticast mode [ 60.022143][ T4074] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 60.033706][ T4074] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.149: bg 0: block 15: invalid block bitmap [ 60.046407][ T4074] loop0: lost filesystem error report for type 5 error -117 [ 60.046560][ T4074] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 60.053876][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 60.053888][ C1] EXT4-fs (loop0): initial error at time 1774304953: ext4_validate_block_bitmap:432 [ 60.053904][ C1] EXT4-fs (loop0): last error at time 1774304953: ext4_validate_block_bitmap:432 [ 60.087756][ T4074] loop0: lost filesystem error report for type 5 error -117 [ 60.089324][ T4074] EXT4-fs (loop0): 1 truncate cleaned up [ 60.103141][ T4074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.121103][ T4074] netlink: 'syz.0.149': attribute type 13 has an invalid length. [ 60.142176][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.656566][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.838121][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 60.838220][ T28] audit: type=1326 audit(1774304954.309:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 60.881551][ T4106] loop4: detected capacity change from 0 to 512 [ 61.027558][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b867000: rx timeout, send abort [ 61.040691][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b867000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.051355][ T28] audit: type=1326 audit(1774304954.309:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 61.078481][ T28] audit: type=1326 audit(1774304954.309:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 61.101835][ T28] audit: type=1326 audit(1774304954.309:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 61.168155][ T4112] batadv_slave_0: Caught tx_queue_len zero misconfig [ 61.182820][ T4112] vfat: Unknown parameter 'shoPtname' [ 62.094254][ T28] audit: type=1326 audit(1774304954.309:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 62.117554][ T28] audit: type=1326 audit(1774304954.309:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 62.141016][ T28] audit: type=1326 audit(1774304954.309:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 62.762423][ T28] audit: type=1326 audit(1774304954.309:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 62.786000][ T28] audit: type=1326 audit(1774304954.309:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fefab8dc799 code=0x7ffc0000 [ 62.852676][ T4106] EXT4-fs (loop4): 1 orphan inode deleted [ 62.926482][ T4106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.940683][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 62.972111][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 62.994364][ T12] loop4: lost filesystem error report for type 5 error -117 [ 63.008903][ T4106] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.035150][ T4121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 63.047862][ T4121] bridge0: entered promiscuous mode [ 63.087133][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.098055][ T4093] set_capacity_and_notify: 1 callbacks suppressed [ 63.098069][ T4093] loop1: detected capacity change from 0 to 512 [ 63.118888][ T4125] loop0: detected capacity change from 0 to 512 [ 63.140814][ T4125] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.163446][ T4125] EXT4-fs (loop0): orphan file too big: 4294967295 [ 63.180298][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.205439][ T4125] EXT4-fs (loop0): mount failed [ 63.286427][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.310165][ T4136] loop4: detected capacity change from 0 to 512 [ 63.321996][ T4138] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4138 comm=syz.3.159 [ 63.348779][ T4136] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 63.358868][ T4138] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4138 comm=syz.3.159 [ 63.373418][ T4143] loop2: detected capacity change from 0 to 512 [ 63.384260][ T4136] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.399086][ T4143] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.169: Failed to acquire dquot type 1 [ 63.414724][ T4136] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.435241][ T4148] loop1: detected capacity change from 0 to 256 [ 63.544977][ T4151] batman_adv: batadv0: Adding interface: dummy0 [ 63.551366][ T4151] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.604072][ T4143] loop2: lost filesystem error report for type 5 error -5 [ 63.604387][ T4143] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.169: Failed to acquire dquot type 1 [ 63.611624][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 63.611640][ C1] EXT4-fs (loop2): last error at time 1774304956: ext4_acquire_dquot:7001 [ 63.639308][ T4136] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 63.690882][ T4136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.166: bg 0: block 15: invalid block bitmap [ 63.715719][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.749507][ T4154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.170'. [ 63.773017][ T4151] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 63.783267][ T4136] loop4: lost filesystem error report for type 5 error -117 [ 63.783566][ T4136] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 63.790960][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 63.790989][ C1] EXT4-fs (loop4): initial error at time 1774304957: ext4_validate_block_bitmap:432 [ 63.791013][ C1] EXT4-fs (loop4): last error at time 1774304957: ext4_validate_block_bitmap:432 [ 63.826354][ T4143] loop2: lost filesystem error report for type 5 error -5 [ 63.871321][ T4143] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.169: bg 0: block 248: padding at end of block bitmap is not set [ 63.927769][ T4143] loop2: lost filesystem error report for type 5 error -117 [ 63.928024][ T4143] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 63.960227][ T4136] loop4: lost filesystem error report for type 5 error -117 [ 63.963173][ T4136] EXT4-fs (loop4): 1 truncate cleaned up [ 63.978076][ T4136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.993837][ T4143] loop2: lost filesystem error report for type 5 error -117 [ 63.994152][ T4143] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.169: Failed to acquire dquot type 1 [ 64.013276][ T4143] EXT4-fs (loop2): 1 orphan inode deleted [ 64.022381][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.035135][ T4143] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.059179][ T4136] netlink: 'syz.4.166': attribute type 13 has an invalid length. [ 64.073410][ T4164] loop1: detected capacity change from 0 to 128 [ 64.114894][ T4167] loop3: detected capacity change from 0 to 512 [ 64.121550][ T4143] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.169: Failed to acquire dquot type 1 [ 64.144191][ T4167] EXT4-fs (loop3): 1 orphan inode deleted [ 64.150254][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 64.150872][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.174824][ T4167] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.177687][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.207860][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.217361][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.243649][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 64.284281][ T4176] ip6tnl0: Caught tx_queue_len zero misconfig [ 64.316163][ T4176] tipc: Started in network mode [ 64.321057][ T4176] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 64.347313][ T4176] tipc: Enabling of bearer rejected, failed to enable media [ 64.411800][ T4196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 64.453361][ T4204] loop1: detected capacity change from 0 to 512 [ 64.459792][ T4196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.183'. [ 64.513152][ T4204] EXT4-fs (loop1): 1 orphan inode deleted [ 64.548332][ T1441] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 64.561545][ T4212] netlink: 'syz.0.187': attribute type 13 has an invalid length. [ 64.773344][ T4204] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.801733][ T4222] loop4: detected capacity change from 0 to 1024 [ 64.808809][ T4222] EXT4-fs: Ignoring removed i_version option [ 64.815021][ T4222] EXT4-fs: Ignoring removed bh option [ 64.820680][ T4222] EXT4-fs: inline encryption not supported [ 64.828146][ T4222] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.840686][ T4222] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 64.855814][ T4222] EXT4-fs (loop4): mount failed [ 65.173391][ T4233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 65.199440][ T4232] loop1: detected capacity change from 0 to 164 [ 65.347472][ T4229] EXT4-fs: Ignoring removed nobh option [ 65.407756][ T4229] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.451885][ T3323] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 65.511755][ T4229] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 65.533150][ T3323] iso9660: Corrupted directory entry in block 1 of inode 1856 [ 65.540691][ T3323] VFS: Lookup of '' in iso9660 loop1 would have caused loop [ 65.568925][ T4229] EXT4-fs (loop2): group descriptors corrupted! [ 65.624151][ T3323] VFS: Lookup of '' in iso9660 loop1 would have caused loop [ 66.203033][ T36] bridge_slave_1: left allmulticast mode [ 66.203050][ T36] bridge_slave_1: left promiscuous mode [ 66.203146][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.203572][ T36] bridge_slave_0: left allmulticast mode [ 66.203588][ T36] bridge_slave_0: left promiscuous mode [ 66.203706][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.337687][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.344064][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.350611][ T36] bond0 (unregistering): Released all slaves [ 66.398259][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 66.398271][ T28] audit: type=1400 audit(1774304959.510:416): avc: denied { create } for pid=4252 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.398297][ T28] audit: type=1400 audit(1774304959.510:417): avc: denied { write } for pid=4252 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2339 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.398340][ T28] audit: type=1400 audit(1774304959.510:418): avc: denied { append } for pid=4252 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2339 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.456418][ T28] audit: type=1400 audit(1774304959.566:419): avc: denied { unlink } for pid=4263 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2339 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.470673][ T36] hsr_slave_0: left promiscuous mode [ 66.471085][ T36] hsr_slave_1: left promiscuous mode [ 66.471311][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.471639][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.575035][ T36] team0 (unregistering): Port device team_slave_1 removed [ 66.644152][ T36] team0 (unregistering): Port device team_slave_0 removed [ 66.872910][ T4242] chnl_net:caif_netlink_parms(): no params data found [ 67.138003][ T28] audit: type=1400 audit(1774304960.211:420): avc: denied { create } for pid=4273 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 67.203176][ T4277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 67.209843][ T4277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.248498][ T28] audit: type=1400 audit(1774304960.230:421): avc: denied { create } for pid=4273 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 67.269850][ T4277] vhci_hcd vhci_hcd.0: Device attached [ 67.287201][ T28] audit: type=1400 audit(1774304960.352:422): avc: denied { read } for pid=4281 comm="vhci_rx" scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 67.330346][ T4279] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 67.336890][ T4279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.367120][ T28] audit: type=1400 audit(1774304960.389:423): avc: denied { setattr } for pid=4280 comm="syz.2.202" name="" dev="pipefs" ino=7980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 67.388645][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.392388][ T4279] vhci_hcd vhci_hcd.0: Device attached [ 67.404322][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.413517][ T4242] bridge_slave_0: entered allmulticast mode [ 67.420345][ T4242] bridge_slave_0: entered promiscuous mode [ 67.427246][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.435779][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 67.437360][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.451794][ T4242] bridge_slave_1: entered allmulticast mode [ 67.455843][ T4277] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 67.459630][ T4242] bridge_slave_1: entered promiscuous mode [ 67.464343][ T4277] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.534539][ T4277] vhci_hcd vhci_hcd.0: Device attached [ 67.543839][ T4301] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 67.550464][ T4301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.564189][ T3503] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 67.571896][ T28] audit: type=1400 audit(1774304960.604:424): avc: denied { bind } for pid=4294 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.595019][ T4312] xt_limit: Overflow, try lower: 0/0 [ 67.612012][ T4316] netlink: 592 bytes leftover after parsing attributes in process `syz.4.204'. [ 67.621250][ T4279] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 67.627888][ T4279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.638837][ T4277] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 67.639308][ T28] audit: type=1400 audit(1774304960.642:425): avc: denied { write } for pid=4283 comm="vhci_tx" scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 67.668488][ T4301] vhci_hcd vhci_hcd.0: Device attached [ 67.677621][ T4277] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(23) [ 67.684324][ T4277] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.693590][ T4279] vhci_hcd vhci_hcd.0: Device attached [ 67.752403][ T4242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.775400][ T4242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.798170][ T4277] vhci_hcd vhci_hcd.0: Device attached [ 67.830441][ T4309] vhci_hcd: connection closed [ 67.830727][ T4281] vhci_hcd: connection reset by peer [ 67.830807][ T50] vhci_hcd vhci_hcd.0: stop threads [ 67.835633][ T4317] vhci_hcd: connection closed [ 67.841456][ T4287] vhci_hcd: connection closed [ 67.849074][ T4242] team0: Port device team_slave_0 added [ 67.861193][ T4296] vhci_hcd: connection closed [ 67.861223][ T4303] vhci_hcd: connection closed [ 67.868944][ T50] vhci_hcd vhci_hcd.0: release socket [ 67.880574][ T4242] team0: Port device team_slave_1 added [ 67.886256][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 67.894787][ T50] vhci_hcd vhci_hcd.0: stop threads [ 67.900000][ T50] vhci_hcd vhci_hcd.0: release socket [ 67.927663][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 67.951298][ T4242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.959048][ T50] vhci_hcd vhci_hcd.0: stop threads [ 67.969441][ T50] vhci_hcd vhci_hcd.0: release socket [ 67.971251][ T4242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.975122][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 68.016571][ T50] vhci_hcd vhci_hcd.0: stop threads [ 68.021937][ T50] vhci_hcd vhci_hcd.0: release socket [ 68.027800][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 68.052437][ T4242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.054928][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 68.072446][ T50] vhci_hcd vhci_hcd.0: stop threads [ 68.082051][ T50] vhci_hcd vhci_hcd.0: release socket [ 68.098045][ T4242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.105105][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 68.110909][ T4242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.138693][ T50] vhci_hcd vhci_hcd.0: stop threads [ 68.146894][ T50] vhci_hcd vhci_hcd.0: release socket [ 68.152643][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 68.171829][ T4242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.242525][ T4242] hsr_slave_0: entered promiscuous mode [ 68.258387][ T4242] hsr_slave_1: entered promiscuous mode [ 68.266935][ T4242] debugfs: 'hsr0' already exists in 'hsr' [ 68.277596][ T4242] Cannot create hsr debugfs directory [ 68.435784][ T4384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.452910][ T4384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.477516][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.537208][ T4387] netlink: 'syz.2.216': attribute type 12 has an invalid length. [ 68.545153][ T4387] netlink: 'syz.2.216': attribute type 29 has an invalid length. [ 68.570816][ T4384] set_capacity_and_notify: 4 callbacks suppressed [ 68.570876][ T4384] loop0: detected capacity change from 0 to 8192 [ 68.578776][ T4387] netlink: 148 bytes leftover after parsing attributes in process `syz.2.216'. [ 68.634608][ T4384] loop0: p1 p2 p4[DM] [ 68.649628][ T4384] loop0: p1 size 67898881 extends beyond EOD, truncated [ 68.672456][ T4242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.680782][ T4384] loop0: p4 size 262144 extends beyond EOD, truncated [ 68.694082][ T4393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4393 comm=syz.4.219 [ 68.713533][ T4242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.723421][ T4242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.751627][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 68.760541][ T4242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.790687][ T4393] loop4: detected capacity change from 0 to 512 [ 68.815627][ T4393] EXT4-fs: dax option not supported [ 68.831603][ T4242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.850525][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 68.874268][ T4242] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.885457][ T4393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4393 comm=syz.4.219 [ 68.901452][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.908595][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.927327][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.934431][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.981417][ T4405] loop4: detected capacity change from 0 to 512 [ 69.035628][ T4405] EXT4-fs (loop4): 1 orphan inode deleted [ 69.049045][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1 [ 69.061030][ T4405] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.078904][ T4242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.097018][ T4405] FAULT_INJECTION: forcing a failure. [ 69.097018][ T4405] name failslab, interval 1, probability 0, space 0, times 0 [ 69.129921][ T4405] CPU: 0 UID: 0 PID: 4405 Comm: syz.4.221 Not tainted syzkaller #0 PREEMPT(full) [ 69.130012][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.130024][ T4405] Call Trace: [ 69.130029][ T4405] [ 69.130034][ T4405] __dump_stack+0x1d/0x30 [ 69.130056][ T4405] dump_stack_lvl+0x95/0xd0 [ 69.130095][ T4405] dump_stack+0x15/0x1b [ 69.130113][ T4405] should_fail_ex+0x263/0x280 [ 69.130134][ T4405] should_failslab+0x8c/0xb0 [ 69.130197][ T4405] kmem_cache_alloc_noprof+0x66/0x400 [ 69.130215][ T4405] ? do_getname+0x2e/0x1c0 [ 69.130312][ T4405] ? vfs_write+0x86e/0x9f0 [ 69.130375][ T4405] do_getname+0x2e/0x1c0 [ 69.130437][ T4405] getname_flags+0x1d/0x30 [ 69.130529][ T4405] __se_sys_quotactl+0x157/0x660 [ 69.130553][ T4405] __x64_sys_quotactl+0x55/0x70 [ 69.130623][ T4405] x64_sys_call+0x1a2a/0x3020 [ 69.130649][ T4405] do_syscall_64+0x12c/0x370 [ 69.130669][ T4405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.130687][ T4405] RIP: 0033:0x7fed720fc799 [ 69.130702][ T4405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.130772][ T4405] RSP: 002b:00007fed70b57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 69.130871][ T4405] RAX: ffffffffffffffda RBX: 00007fed72375fa0 RCX: 00007fed720fc799 [ 69.130886][ T4405] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffff80000700 [ 69.130901][ T4405] RBP: 00007fed70b57090 R08: 0000000000000000 R09: 0000000000000000 [ 69.130915][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.130928][ T4405] R13: 00007fed72376038 R14: 00007fed72375fa0 R15: 00007ffd8ea73778 [ 69.130949][ T4405] [ 69.514485][ T4242] veth0_vlan: entered promiscuous mode [ 69.533011][ T4242] veth1_vlan: entered promiscuous mode [ 69.573003][ T4242] veth0_macvtap: entered promiscuous mode [ 69.585545][ T4242] veth1_macvtap: entered promiscuous mode [ 69.608758][ T4242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.628094][ T4242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.656314][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.665902][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.675936][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.684752][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.778353][ T4437] xt_hashlimit: size too large, truncated to 1048576 [ 69.798989][ T4426] loop2: detected capacity change from 0 to 1024 [ 69.819595][ T4438] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.855626][ T4426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'. [ 69.873398][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 69.984398][ T4447] netlink: 'syz.5.227': attribute type 12 has an invalid length. [ 70.031451][ T4447] netlink: 'syz.5.227': attribute type 29 has an invalid length. [ 70.040727][ T4447] netlink: 148 bytes leftover after parsing attributes in process `syz.5.227'. [ 70.158033][ T4458] loop5: detected capacity change from 0 to 512 [ 70.196345][ T4458] EXT4-fs (loop5): 1 orphan inode deleted [ 70.202666][ T4458] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.213521][ T4458] FAULT_INJECTION: forcing a failure. [ 70.213521][ T4458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.218384][ T69] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 70.235030][ T4458] CPU: 1 UID: 0 PID: 4458 Comm: syz.5.231 Not tainted syzkaller #0 PREEMPT(full) [ 70.235120][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.235230][ T4458] Call Trace: [ 70.235255][ T4458] [ 70.235274][ T4458] __dump_stack+0x1d/0x30 [ 70.235379][ T4458] dump_stack_lvl+0x95/0xd0 [ 70.235435][ T4458] dump_stack+0x15/0x1b [ 70.235536][ T4458] should_fail_ex+0x263/0x280 [ 70.235702][ T4458] should_fail+0xb/0x20 [ 70.235845][ T4458] should_fail_usercopy+0x1a/0x20 [ 70.235921][ T4458] strncpy_from_user+0x27/0x250 [ 70.236048][ T4458] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 70.236124][ T4458] do_getname+0x59/0x1c0 [ 70.236171][ T4458] getname_flags+0x1d/0x30 [ 70.236299][ T4458] __se_sys_quotactl+0x157/0x660 [ 70.236366][ T4458] __x64_sys_quotactl+0x55/0x70 [ 70.236431][ T4458] x64_sys_call+0x1a2a/0x3020 [ 70.236502][ T4458] do_syscall_64+0x12c/0x370 [ 70.236594][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.236729][ T4458] RIP: 0033:0x7f7278d9c799 [ 70.236779][ T4458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.236830][ T4458] RSP: 002b:00007f72777f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 70.236945][ T4458] RAX: ffffffffffffffda RBX: 00007f7279015fa0 RCX: 00007f7278d9c799 [ 70.236981][ T4458] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffff80000700 [ 70.237018][ T4458] RBP: 00007f72777f7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.237071][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.237099][ T4458] R13: 00007f7279016038 R14: 00007f7279015fa0 R15: 00007fff08104d88 [ 70.237157][ T4458] [ 70.541253][ T4468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.233'. [ 70.694013][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.732932][ T4463] xt_hashlimit: size too large, truncated to 1048576 [ 70.962820][ T4480] loop4: detected capacity change from 0 to 512 [ 71.007740][ T4480] EXT4-fs (loop4): 1 orphan inode deleted [ 71.095047][ T4480] EXT4-fs mount: 8 callbacks suppressed [ 71.095064][ T4480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.114785][ T4485] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.122227][ T4485] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.250472][ T4480] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.353812][ T50] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 71.392905][ T4495] SET target dimension over the limit! [ 71.443018][ T4500] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.468284][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.240'. [ 71.495871][ T4503] loop3: detected capacity change from 0 to 512 [ 71.542130][ T4503] EXT4-fs (loop3): 1 orphan inode deleted [ 71.557401][ T4503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.570020][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1 [ 71.603121][ T36] fserror_report: 3 callbacks suppressed [ 71.603139][ T36] loop3: lost filesystem error report for type 5 error -117 [ 71.613558][ T4503] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.692716][ T4501] loop5: detected capacity change from 0 to 32768 [ 71.700269][ T4508] loop0: detected capacity change from 0 to 4096 [ 71.701298][ T4503] FAULT_INJECTION: forcing a failure. [ 71.701298][ T4503] name failslab, interval 1, probability 0, space 0, times 0 [ 71.728850][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.764467][ T3675] loop5: p1 p3 < > [ 71.765704][ T4503] CPU: 0 UID: 0 PID: 4503 Comm: syz.3.242 Not tainted syzkaller #0 PREEMPT(full) [ 71.765848][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.765885][ T4503] Call Trace: [ 71.765904][ T4503] [ 71.765925][ T4503] __dump_stack+0x1d/0x30 [ 71.766018][ T4503] dump_stack_lvl+0x95/0xd0 [ 71.766134][ T4503] dump_stack+0x15/0x1b [ 71.766200][ T4503] should_fail_ex+0x263/0x280 [ 71.766270][ T4503] should_failslab+0x8c/0xb0 [ 71.766334][ T4503] kmem_cache_alloc_noprof+0x66/0x400 [ 71.766388][ T4503] ? do_getname_kernel+0x53/0x190 [ 71.766474][ T4503] do_getname_kernel+0x53/0x190 [ 71.766541][ T4503] kern_path+0x23/0xf0 [ 71.766647][ T4503] lookup_bdev+0x66/0x150 [ 71.766725][ T4503] __se_sys_quotactl+0x19a/0x660 [ 71.766800][ T4503] __x64_sys_quotactl+0x55/0x70 [ 71.766870][ T4503] x64_sys_call+0x1a2a/0x3020 [ 71.766936][ T4503] do_syscall_64+0x12c/0x370 [ 71.766999][ T4503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.767054][ T4503] RIP: 0033:0x7fefab8dc799 [ 71.767092][ T4503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.767162][ T4503] RSP: 002b:00007fefaa32f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 71.767209][ T4503] RAX: ffffffffffffffda RBX: 00007fefabb55fa0 RCX: 00007fefab8dc799 [ 71.767245][ T4503] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffff80000700 [ 71.767299][ T4503] RBP: 00007fefaa32f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.767335][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.767380][ T4503] R13: 00007fefabb56038 R14: 00007fefabb55fa0 R15: 00007fff8a3e4318 [ 71.767493][ T4503] [ 71.811300][ T4496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4496 comm=syz.5.240 [ 71.812839][ T28] kauditd_printk_skb: 177 callbacks suppressed [ 71.812874][ T28] audit: type=1400 audit(1774304964.580:599): avc: denied { mounton } for pid=4494 comm="syz.5.240" path="/proc/17/task" dev="proc" ino=8606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 71.983502][ T4501] loop5: p1 p3 < > [ 71.991382][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.003297][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.003753][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.100510][ T4515] netlink: 'syz.3.244': attribute type 13 has an invalid length. [ 72.165366][ T28] audit: type=1400 audit(1774304964.898:600): avc: denied { read append } for pid=4516 comm="syz.0.245" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.189276][ T28] audit: type=1400 audit(1774304964.898:601): avc: denied { open } for pid=4516 comm="syz.0.245" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.214676][ T4519] netlink: 'syz.4.247': attribute type 12 has an invalid length. [ 72.233320][ T4519] netlink: 'syz.4.247': attribute type 29 has an invalid length. [ 72.245417][ T4519] netlink: 148 bytes leftover after parsing attributes in process `syz.4.247'. [ 72.282746][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 72.294103][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 72.365287][ T28] audit: type=1400 audit(1774304964.963:602): avc: denied { ioctl } for pid=4524 comm="syz.0.249" path="socket:[8638]" dev="sockfs" ino=8638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.417616][ T4532] program syz.4.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.449663][ T28] audit: type=1400 audit(1774304965.169:603): avc: denied { bind } for pid=4534 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.524422][ T4538] IPv6: sit1: Disabled Multicast RS [ 72.530701][ T4538] sit1: entered allmulticast mode [ 72.622921][ T4540] loop4: detected capacity change from 0 to 512 [ 72.691437][ T4529] EXT4-fs: Ignoring removed bh option [ 72.736541][ T4540] EXT4-fs (loop4): 1 orphan inode deleted [ 72.747946][ T30] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.802182][ T4540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.839558][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 72.854888][ T4529] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.880858][ T4540] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.915314][ T28] audit: type=1400 audit(1774304965.169:604): avc: denied { write } for pid=4534 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.934975][ T28] audit: type=1400 audit(1774304965.216:605): avc: denied { compute_member } for pid=4536 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.986813][ T4540] FAULT_INJECTION: forcing a failure. [ 72.986813][ T4540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.999998][ T3503] usb 1-1: enqueue for inactive port 0 [ 73.004714][ T4540] CPU: 1 UID: 0 PID: 4540 Comm: syz.4.254 Not tainted syzkaller #0 PREEMPT(full) [ 73.004777][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.004810][ T4540] Call Trace: [ 73.004821][ T4540] [ 73.004838][ T4540] __dump_stack+0x1d/0x30 [ 73.004940][ T4540] dump_stack_lvl+0x95/0xd0 [ 73.005080][ T4540] dump_stack+0x15/0x1b [ 73.005134][ T4540] should_fail_ex+0x263/0x280 [ 73.005261][ T4540] should_fail+0xb/0x20 [ 73.005321][ T4540] should_fail_usercopy+0x1a/0x20 [ 73.005450][ T4540] _copy_to_user+0x20/0xa0 [ 73.005489][ T4540] simple_read_from_buffer+0xb5/0x130 [ 73.005512][ T4540] proc_fail_nth_read+0x10e/0x150 [ 73.005594][ T4540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.005720][ T4540] vfs_read+0x1ab/0x7f0 [ 73.005885][ T4540] ? __rcu_read_unlock+0x4e/0x70 [ 73.005938][ T4540] ? __fget_files+0x184/0x1c0 [ 73.006076][ T4540] ? _raw_spin_lock+0x52/0xa0 [ 73.006140][ T4540] ? mutex_lock+0x57/0x90 [ 73.006233][ T4540] ksys_read+0xdc/0x1a0 [ 73.006283][ T4540] __x64_sys_read+0x40/0x50 [ 73.006328][ T4540] x64_sys_call+0x2886/0x3020 [ 73.006393][ T4540] do_syscall_64+0x12c/0x370 [ 73.006481][ T4540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.006536][ T4540] RIP: 0033:0x7fed720bcfce [ 73.006639][ T4540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.006683][ T4540] RSP: 002b:00007fed70b56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.006730][ T4540] RAX: ffffffffffffffda RBX: 00007fed70b576c0 RCX: 00007fed720bcfce [ 73.006764][ T4540] RDX: 000000000000000f RSI: 00007fed70b570a0 RDI: 0000000000000004 [ 73.006793][ T4540] RBP: 00007fed70b57090 R08: 0000000000000000 R09: 0000000000000000 [ 73.006826][ T4540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.006929][ T4540] R13: 00007fed72376038 R14: 00007fed72375fa0 R15: 00007ffd8ea73778 [ 73.006981][ T4540] [ 73.217550][ T4529] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 73.244419][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.326648][ T4550] batadv_slave_0: Caught tx_queue_len zero misconfig [ 73.384771][ T4550] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 73.392181][ T4551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4551 comm=syz.4.256 [ 73.415449][ T3503] usb 1-1: enqueue for inactive port 0 [ 73.472211][ T4557] netlink: 68 bytes leftover after parsing attributes in process `syz.5.258'. [ 73.500047][ T3503] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 73.543946][ T28] audit: type=1400 audit(1774304966.198:606): avc: denied { read } for pid=4560 comm="syz.5.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.566470][ T4561] EXT4-fs: Ignoring removed orlov option [ 73.572892][ T4561] EXT4-fs: Mount option(s) incompatible with ext3 [ 73.624557][ T28] audit: type=1400 audit(1774304966.263:607): avc: denied { connect } for pid=4562 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.685337][ T4570] FAULT_INJECTION: forcing a failure. [ 73.685337][ T4570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.699025][ T4568] netlink: 'syz.0.262': attribute type 13 has an invalid length. [ 73.722492][ T4570] CPU: 0 UID: 0 PID: 4570 Comm: syz.5.263 Not tainted syzkaller #0 PREEMPT(full) [ 73.722518][ T4570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.722528][ T4570] Call Trace: [ 73.722533][ T4570] [ 73.722620][ T4570] __dump_stack+0x1d/0x30 [ 73.722667][ T4570] dump_stack_lvl+0x95/0xd0 [ 73.722694][ T4570] dump_stack+0x15/0x1b [ 73.722713][ T4570] should_fail_ex+0x263/0x280 [ 73.722744][ T4570] should_fail+0xb/0x20 [ 73.722776][ T4570] should_fail_usercopy+0x1a/0x20 [ 73.722808][ T4570] _copy_to_user+0x20/0xa0 [ 73.722844][ T4570] simple_read_from_buffer+0xb5/0x130 [ 73.722871][ T4570] proc_fail_nth_read+0x10e/0x150 [ 73.722930][ T4570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.722964][ T4570] vfs_read+0x1ab/0x7f0 [ 73.723001][ T4570] ? __rcu_read_unlock+0x4e/0x70 [ 73.723026][ T4570] ? __fget_files+0x184/0x1c0 [ 73.723049][ T4570] ? mutex_lock+0x57/0x90 [ 73.723153][ T4570] ksys_read+0xdc/0x1a0 [ 73.723172][ T4570] __x64_sys_read+0x40/0x50 [ 73.723187][ T4570] x64_sys_call+0x2886/0x3020 [ 73.723279][ T4570] do_syscall_64+0x12c/0x370 [ 73.723365][ T4570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.723430][ T4570] RIP: 0033:0x7f7278d5cfce [ 73.723446][ T4570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.723463][ T4570] RSP: 002b:00007f72777f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.723484][ T4570] RAX: ffffffffffffffda RBX: 00007f72777f76c0 RCX: 00007f7278d5cfce [ 73.723499][ T4570] RDX: 000000000000000f RSI: 00007f72777f70a0 RDI: 0000000000000006 [ 73.723512][ T4570] RBP: 00007f72777f7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.723588][ T4570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.723598][ T4570] R13: 00007f7279016038 R14: 00007f7279015fa0 R15: 00007fff08104d88 [ 73.723616][ T4570] [ 74.278817][ T4586] __nla_validate_parse: 1 callbacks suppressed [ 74.278834][ T4586] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.267'. [ 74.310892][ T4592] set_capacity_and_notify: 3 callbacks suppressed [ 74.310905][ T4592] loop3: detected capacity change from 0 to 128 [ 74.327406][ T4591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.269'. [ 74.350634][ T4594] syz.5.267 uses obsolete (PF_INET,SOCK_PACKET) [ 74.630619][ T4597] loop5: detected capacity change from 0 to 256 [ 74.694966][ T4597] FAT-fs (loop5): Directory bread(block 64) failed [ 74.701520][ T4597] FAT-fs (loop5): Directory bread(block 65) failed [ 74.708475][ T4597] FAT-fs (loop5): Directory bread(block 66) failed [ 74.709512][ T4578] delete_channel: no stack [ 74.715096][ T4597] FAT-fs (loop5): Directory bread(block 67) failed [ 74.715125][ T4597] FAT-fs (loop5): Directory bread(block 68) failed [ 74.732613][ T4597] FAT-fs (loop5): Directory bread(block 69) failed [ 74.739158][ T4597] FAT-fs (loop5): Directory bread(block 70) failed [ 74.745705][ T4597] FAT-fs (loop5): Directory bread(block 71) failed [ 74.752249][ T4597] FAT-fs (loop5): Directory bread(block 72) failed [ 74.758822][ T4597] FAT-fs (loop5): Directory bread(block 73) failed [ 74.930395][ T4603] loop4: detected capacity change from 0 to 4096 [ 74.981682][ T4603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.069379][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.090555][ T4615] netlink: 'syz.5.275': attribute type 12 has an invalid length. [ 75.123751][ T4615] netlink: 'syz.5.275': attribute type 29 has an invalid length. [ 75.132456][ T4615] netlink: 148 bytes leftover after parsing attributes in process `syz.5.275'. [ 75.174877][ T4619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=4619 comm=syz.0.276 [ 75.418364][ T4625] batman_adv: batadv0: Adding interface: vlan2 [ 75.438956][ T4625] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.488349][ T4629] loop4: detected capacity change from 0 to 128 [ 75.640796][ T4625] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 76.039977][ T4642] loop5: detected capacity change from 0 to 128 [ 76.099102][ T4623] loop3: detected capacity change from 0 to 32768 [ 76.269519][ T4642] syz.5.283: attempt to access beyond end of device [ 76.269519][ T4642] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 76.297324][ T4642] syz.5.283: attempt to access beyond end of device [ 76.297324][ T4642] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 76.329477][ T4642] syz.5.283: attempt to access beyond end of device [ 76.329477][ T4642] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 76.372094][ T4642] syz.5.283: attempt to access beyond end of device [ 76.372094][ T4642] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 76.552977][ T4642] syz.5.283: attempt to access beyond end of device [ 76.552977][ T4642] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 76.566657][ T4642] syz.5.283: attempt to access beyond end of device [ 76.566657][ T4642] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 76.582562][ T4642] syz.5.283: attempt to access beyond end of device [ 76.582562][ T4642] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 76.597005][ T4642] syz.5.283: attempt to access beyond end of device [ 76.597005][ T4642] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 76.610614][ T4642] syz.5.283: attempt to access beyond end of device [ 76.610614][ T4642] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 76.627289][ T4642] syz.5.283: attempt to access beyond end of device [ 76.627289][ T4642] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 76.800663][ T4653] ================================================================== [ 76.808774][ T4653] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 76.818507][ T4653] [ 76.820828][ T4653] write to 0xffff88811b503d00 of 8 bytes by task 4660 on cpu 0: [ 76.828479][ T4653] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 76.834376][ T4653] page_pool_alloc_pages+0xd0/0x130 [ 76.839574][ T4653] bpf_test_run_xdp_live+0x66c/0x1360 [ 76.844947][ T4653] bpf_prog_test_run_xdp+0x57b/0xa10 [ 76.850248][ T4653] bpf_prog_test_run+0x204/0x340 [ 76.855183][ T4653] __sys_bpf+0x52e/0x7e0 [ 76.859425][ T4653] __x64_sys_bpf+0x41/0x50 [ 76.863880][ T4653] x64_sys_call+0x10cb/0x3020 [ 76.868573][ T4653] do_syscall_64+0x12c/0x370 [ 76.873184][ T4653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.879078][ T4653] [ 76.881404][ T4653] read to 0xffff88811b503d00 of 8 bytes by task 4653 on cpu 1: [ 76.888938][ T4653] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 76.894843][ T4653] napi_pp_put_page+0xe9/0x200 [ 76.899619][ T4653] skb_release_data+0x624/0x670 [ 76.904513][ T4653] __kfree_skb+0x44/0x150 [ 76.908853][ T4653] sk_skb_reason_drop+0xbd/0x290 [ 76.913807][ T4653] udp_recvmsg+0x115/0xa90 [ 76.918325][ T4653] inet_recvmsg+0x143/0x290 [ 76.922847][ T4653] sock_recvmsg+0xda/0x120 [ 76.927269][ T4653] ____sys_recvmsg+0xf5/0x280 [ 76.931970][ T4653] ___sys_recvmsg+0x11f/0x3b0 [ 76.936770][ T4653] do_recvmmsg+0x1ef/0x560 [ 76.941190][ T4653] __x64_sys_recvmmsg+0xe5/0x170 [ 76.946151][ T4653] x64_sys_call+0x80f/0x3020 [ 76.950763][ T4653] do_syscall_64+0x12c/0x370 [ 76.955391][ T4653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.961286][ T4653] [ 76.963617][ T4653] value changed: 0xffffea00046ef280 -> 0x0000000000000000 [ 76.970751][ T4653] [ 76.973088][ T4653] Reported by Kernel Concurrency Sanitizer on: [ 76.979243][ T4653] CPU: 1 UID: 0 PID: 4653 Comm: syz.4.287 Not tainted syzkaller #0 PREEMPT(full) [ 76.988428][ T4653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.998486][ T4653] ==================================================================