last executing test programs: 6m50.24577789s ago: executing program 32 (id=396): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) madvise(&(0x7f000037e000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040804) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket(0xa, 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x88182, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, 0x0, 0x0, 0x851, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c00038008"], 0x10c}}, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m39.626943031s ago: executing program 33 (id=294): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = epoll_create1(0x80000) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) (async) ppoll(&(0x7f0000000180)=[{r5, 0x1003}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xc000000b}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r8, 0x4, 0x42800) (async) r9 = dup(r8) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) (async) splice(r6, 0x0, r7, 0x0, 0xd, 0xb) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe) (async) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) (async) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r10, 0x400455c8, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 6m19.349678325s ago: executing program 34 (id=1014): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000900)="7292934a", 0x4}], 0x1}, 0x40810) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000040)='/dev/ptmx\x00', &(0x7f00000000c0)='/dev/ptmx\x00', &(0x7f0000000100)='/dev/ptmx\x00', &(0x7f0000000140)='_.^\\\x00', &(0x7f0000000180)='&:,#\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)='/dev/ptmx\x00', &(0x7f0000000240)='/dev/ptmx\x00', &(0x7f0000000280)='/dev/ptmx\x00', &(0x7f00000002c0)='&\xe8&\x00']}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$watch_queue(r2, &(0x7f0000002d40)=""/4105, 0x1009) 6m9.797230344s ago: executing program 1 (id=1147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800ffc30400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x2834}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x549}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30048801}, 0x8044) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x24004000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 6m9.552678378s ago: executing program 1 (id=1151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000021010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m9.34249005s ago: executing program 1 (id=1153): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x40080) r2 = socket(0x10, 0x3, 0xfffffffd) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x28000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mlock2(&(0x7f00003ee000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x20180080, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) truncate(0x0, 0x4f) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000100), 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r6, &(0x7f0000001880)=[{&(0x7f0000000440)=""/147, 0x93}], 0x1) write$cgroup_pid(r6, 0x0, 0x0) 6m8.82529192s ago: executing program 1 (id=1159): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x1, 0x2b8, &(0x7f0000000800)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x7, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./bus\x00') 6m8.425511314s ago: executing program 1 (id=1167): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000005cf0dd4d005d49544070ef25fab05d0000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000091fa4cc09907040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x41100, 0x68}, 0x94) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 6m7.545628196s ago: executing program 1 (id=1174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x9c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x108}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0x9c}}, 0x0) 6m7.545436975s ago: executing program 35 (id=1174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x9c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x108}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0x9c}}, 0x0) 4m22.665244953s ago: executing program 8 (id=3282): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0xa0, 0x6, 0x0, 0x2001}, 0x8, 0x3, 0x0, 0xf000000, 0x2000, 0x200001, 0x0}) 4m22.640038255s ago: executing program 8 (id=3286): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4m22.602365767s ago: executing program 8 (id=3289): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = accept$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="34c1459f898c83f43d896691e906d42a988dd16bb12003199832cf57a05c1169b0725d83603c099e0e7a50c5d0f49b0b6511737af90cc05408f363f8a9faaf5a903cc83fb895743491a0b6c89b038cc288b8b40b4f6673d80e521e4d276241689a0322e50e3e4b7adf73e3ab5aa746537b22274171c2c2969666b8f839feead0a2bd38441092f3e522668e82a491a7bba7edb4151fa47d9e882758efbcc155ba96f2ac63e3778ef2b733ab6b86db", 0xae) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m22.493118593s ago: executing program 8 (id=3291): r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000009930f15593de3bc85251478483e4df1aea82f8d12c34ca193a421a0269344804c0b0f683f1bf7d81d01ce2001f8d081493ed4e1a2ebc2138c47436c204ef5cfc5330a04a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000018ffff00"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000001a00)=""/4113, 0x41100, 0xd}, 0x94) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESHEX, @ANYRES64], 0x8, 0x2fa, &(0x7f00000000c0)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r6, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) ftruncate(r7, 0x2150a9e1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r8}, 0xc) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r10, 0x400, 0x0) fcntl$setlease(r10, 0x400, 0x2) truncate(&(0x7f0000000000)='./file0\x00', 0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000a79d010400eeffff89d08ff236875b76"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}]}, 0x2c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 4m22.02675325s ago: executing program 8 (id=3302): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x1, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 37) 4m21.670989491s ago: executing program 8 (id=3311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 4m21.669129881s ago: executing program 36 (id=3311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 3m16.302815841s ago: executing program 9 (id=4566): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 3m15.859144157s ago: executing program 9 (id=4572): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ2+7Ifpy/oxQe96CXMelQPVTYQC0q3iHoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYy0zbKs+4Wza2f3fsHIkzz5bE/yIeP5FNKtp+uvq6u+uWoHYhRUDJFQdkRmxZVdmXib68S55LjcLUooN+bebH9cfPb8Yalcnq+oLpSWbhVVdfrK17fvP139Fvz35PN0Pi+bsy+2fha/b/6/eWnr19Ir11fX13ojUFuXG43AXq45uuL6VVP1cc2xfUfduu94+/KrtcbaWkvt+srU5Jrn+L7a9ZYa0tKgoYW4qrqapqlTk+24IBdI7o9HWBuVil06k2Jwbnheyc6KyMSBp8HaGE5FAABgmI7u/43knN3+3+jt/0VO6P8/xGdNf+l7/5+VpP+vOp3+P/Baar+03XT/j2Odrv83zqYY/I1MmNq5ty/leaWJwwfR/wMAAAAAAAAAAAAAAAAAAAAA8C/YiaKZKIpm2ltDRKJ4v/2TTe0fMvRCvVs/qtLzn577fDzBx8w/RkDqxb2CyI+waTWtTGfbzS88KM/PaUfqxb/tZtPKJvmb3bzuz4/LZJwvHprPyfVr3Xw7d/9ROZ1fb1oTsnJs5WG/bgEAAAAAACPP1MRscrAgyfreNDUvvfnO+r0bhXufD/Ss78fk8tjgrgMAAAAAABzNb72r2rWa4w0myA7wb506EDnd8NtRvi9lZEXkhHMqiyLDv1EHgrycizJGObjTt18YZUS6R8bjfwY9TwEAAACA0bK3Hhh2JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFyD+OqyYV8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcF78DgAA///CzsAm") 3m15.687242466s ago: executing program 9 (id=4576): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, r0}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m15.519273196s ago: executing program 9 (id=4581): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, r1, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)=0x9b) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@delalloc}, {@usrjquota}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='.\x00', 0x80a5, &(0x7f00000008c0)=ANY=[], 0x10, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000740)=[{&(0x7f0000000380)=""/119, 0x77}], 0x1, &(0x7f0000000940)=[{0x0}, {&(0x7f00000007c0)=""/192, 0xc0}], 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0, r5, 0x3}}, 0x18) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0xf7b2, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080), &(0x7f0000000400)) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="260000001000000000000000", @ANYRES32=r7, @ANYBLOB="4319658e8900e3c3f9812d698eccc5c0c205eeaaa80024b27b327eac6fe4dd61a84710cd42e3ed06a42fd1788f17b57dee6bc41b3d71884a6736ba9590871b5171e858d7e9131ef4fbf49d90eac26ef6848e1e985c73aae86fda1d52e4436a7d27", @ANYRES64=0x0], 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r8, r7, 0x5}, 0x10) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000100)={0x8001, 0xfffffffa, 0xc2}, 0x0) 3m14.981526338s ago: executing program 9 (id=4584): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r2, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3m14.547776133s ago: executing program 9 (id=4596): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) 3m14.516548535s ago: executing program 37 (id=4596): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) 2m27.333197852s ago: executing program 0 (id=5639): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xf45) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x200}}, 0x0, 0x0, 0x4c, 0x0, "31147913b33c3a73b15671127ff6f31689cad56b325f545024f1a12f45542d0fffccc86fa580e196d48631b7e928ee1ac1b7c95fea0403b7e2594df579b15de0dec74cafbd20cb332feff5a895e19408"}, 0xd8) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000004700)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2m27.230390767s ago: executing program 0 (id=5640): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x40000000, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x300, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 2m26.972969493s ago: executing program 0 (id=5642): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x17, 0x0, &(0x7f0000001040)) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timerfd_create(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x25dfdbfb, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4008) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, r5, 0x121, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff0}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8860) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r7, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x61}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}}, 0x88) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 2m26.085267715s ago: executing program 0 (id=5661): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") mprotect(&(0x7f0000451000/0x2000)=nil, 0x2000, 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c6d6e6f7021ce10797a303132333435360000000000"], 0x29, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a120400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES16=r3], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8667f7fc7455970c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x7, [@datasec={0xc, 0x9, 0x0, 0xf, 0x1, [{0x4, 0x6, 0x7}, {0x2, 0x4, 0x401}, {0x2, 0x8}, {0x2, 0xfffffffb, 0x200}, {0x1, 0x8, 0x1}, {0x1, 0xc982, 0x1}, {0x4, 0xc, 0x100}, {0x2, 0x14d, 0x6}, {0x4, 0x4, 0x7f}], '{'}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x10, 0x2}, {0xa, 0x2}, {0xc, 0x5}, {0x7, 0x1}, {0xa, 0x3}, {0x3, 0x5}, {0x10, 0x1}, {0x8, 0x2}]}]}, {0x0, [0x30, 0x5f, 0x30, 0x30, 0x30]}}, &(0x7f0000000440)=""/124, 0xef, 0x7c, 0x1, 0x8}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'team0\x00', {}, 0x8001}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 2m25.602714213s ago: executing program 0 (id=5673): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r2, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001080000", @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m24.760363742s ago: executing program 0 (id=5696): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0xfffff000}}], 0x18}, 0x840) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a30"], 0xc8}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5ef, &(0x7f0000000d80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/54, 0x36) getdents64(r3, 0xfffffffffffffffe, 0x29) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00009c7000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/4096, 0x1000, 0x0, &(0x7f0000000100)=""/141, 0x8d}, &(0x7f0000000040)=0x40) bind$netlink(r2, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r2, r2, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8024}, 0x20000010) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2c4}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}]}}]}, 0x60}}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m24.759072062s ago: executing program 38 (id=5696): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0xfffff000}}], 0x18}, 0x840) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a30"], 0xc8}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5ef, &(0x7f0000000d80)="$eJzs3M9uG8cZAPBZW4ppBzUKBG0cx0A2Tg7uwQpJ1TIE92B2tZI2IbnELhXIp8KopdSIlABJCzS+FL6kDdCip56LXHroE/Sl8gwqllzZpP5Rsa3YQX4/wNwR9+PON8PFjElwJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIUpWms1WFLpZf2MzPl6yUuS9E87vX+9/U4cp8xOPIQohqv6FRiNcGT915Y2nsb+oHq6HN8d/vRka1aERHr3+y5/feWPuXPXC+SgKJyT0QlysHvbOh7qiz8+N83ly/suvHn16f2dn64uzTuQVtZb2szLPep21NM7KPF5eWmp+sL5axqtZNy3vlcO0FydF2hnmRXwjuRtCWF6M04V7+UZ/baXTTeMbya/i1vLy7ZvtZnMp/nBhkHaKMu9/8OFCmaxn3W7WXxvFVKdvtt8Jt6sb8aNsGA/TRi+Otx/ubC3OSrIKap0mqD0rqN1st1utdru1dGv51u1mszG+Hf7T/iKMn5hrHhAOvmTu7G9aXjmvhYmBY3+Me+1FjeHwrPaSfx594vwPnQkAAABwVqLRd+zR6Hv5K6PSatZNm1Mxe9HFl5YfAAAA8PyiMPp9XVT/MO9KiA5//p/gNysAAADwI/S3J2vsLhyxxi5EUSgHF6L9j/2Dzfej3U5V6uzWCwQOrRMYrl6NLtcXGR2W5uq/kvRa9NY46K396O/qw/b0Wr/5cDCPqCjmo8ejBKbrO10CVdRc+Hu4Oo65+mB8fFDH1SsSL61m3XQhybt3WqHTuXxumG4O//TZwz+HUBR757/p9y5HYfvhztbC7z/feTDK5XF1lce70fhy0cm5XAhPOyP88cm6x3p1493pFs+PvoipWv1Nv3dpXG9z8g2oFyOeO/0bEL4Ob49j3r40Pl6abn+jqrO1cETrJ7NoDTbfv1BXdsqWH8ji2jjm2o33qsN7N+oz8xNZtGdl0a77/y9V/z9TXxyTxWRfLM7KYnHyLjg2i6q3js4C4GXZPjgLHZr/n867x8474zX9J4y12yeu5B9N4QdrOfTfiz+EWbV8Hd4dx7x7de7pjHRgRG/OGtGbp5zXjxvR/xuu//tfIWyE6/vBx82xVb3/mJpVo91vqxd8e6jeeqV5KLvtvb0QLt4Zz99fnb/5cPf+J1ufbH3Wbi8uNX/dbN5qh/lRM+rD0f11Pph7AH7S0uK76NLwr1FRZIPftZaXW53hehoXefJRXGQra2mc9Ydpkax3+mtpPCjyYZ7k3arwcbaSlnG5MRjkxTBezYt4kJfZ5mjnl7je+qVMe53+MEvKQTftlGmc5P1hJxnGK1mZxION33azcj0tRi8uB2mSrWZJZ5jl/bjMN4okXYjjMk0nArOVtD/MVrOq2I8HRdbrFPfij/PuRi+NV9IyKbLBMB9fcL+urL+aF73qsocmcQD4qfoy1DvYPdnK7nsXQmNGzMtuIwAw7eAsfeHYSHsAAAAAAAAAAAAAAADAyzK5XO839ZY+z70icL/QeEHXmVFoTD9z9/Wjgt858zS+VyGEMPfo0/v7m/A81wX3d2J6Fdr1/IUohPAKpHHyPXZWhcaMt3K+Pv+sVVSdOzv4Z1XMDz0SAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBs/w8AAP//uVeEhg==") r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/54, 0x36) getdents64(r3, 0xfffffffffffffffe, 0x29) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00009c7000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/4096, 0x1000, 0x0, &(0x7f0000000100)=""/141, 0x8d}, &(0x7f0000000040)=0x40) bind$netlink(r2, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r2, r2, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8024}, 0x20000010) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2c4}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}]}}]}, 0x60}}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m12.482057549s ago: executing program 7 (id=5924): syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x2002759, &(0x7f0000000000)={[], [], 0x2c}, 0x1, 0x532, &(0x7f0000000800)="$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") 2m12.365585956s ago: executing program 7 (id=5926): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6b3100000000000617ae5119b5135c2aee68cc3a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dfed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}, 0x48}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x800000000000000}}, {0x28}}}}, 0x3c0) 2m12.339912858s ago: executing program 7 (id=5928): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59a09}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffff8}]}, 0x3c}}, 0x0) 2m12.052856755s ago: executing program 7 (id=5932): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xfec6, 0x2000, 0x2, 0x374}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001d00)={0x9, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000780)=""/168, 0xa8}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000001840)=""/15, 0xf}, {&(0x7f0000001880)=""/233, 0xe9}, {&(0x7f0000001980)=""/182, 0xb6}, {&(0x7f0000001a40)=""/225, 0xe1}, {&(0x7f0000001b40)=""/133, 0x85}], &(0x7f0000001cc0)=[0x8000000000000000, 0x8, 0x3, 0x5, 0x6]}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) semctl$IPC_RMID(0x0, 0x0, 0x0) ioperm(0x0, 0x7fff, 0x15f9) r2 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000140)={0x0, 0xffffffffffffffef}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000180)="e02742e8680d01000010762f080070e9b38c62d98711fe251af5d734d038ab428fad", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000b000000"], &(0x7f0000000600)=""/4, 0x87, 0x4, 0x1}, 0x28) 2m11.814894599s ago: executing program 7 (id=5940): syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x7ff]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x1}) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) lseek(r3, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 2m11.26819736s ago: executing program 7 (id=5948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000000010000000100000001000000", @ANYRES32, @ANYBLOB="00000000f80000000002000000000019aea49f2032af84a000000000e8dfd7536c1b2295a1bfa9a8950dbedbc479", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0x96c, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9528da7}, 0x94) 2m11.221540593s ago: executing program 39 (id=5948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000000010000000100000001000000", @ANYRES32, @ANYBLOB="00000000f80000000002000000000019aea49f2032af84a000000000e8dfd7536c1b2295a1bfa9a8950dbedbc479", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0x96c, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9528da7}, 0x94) 1m7.60916682s ago: executing program 3 (id=7401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1m7.374527344s ago: executing program 3 (id=7405): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m7.373811934s ago: executing program 5 (id=7406): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xc}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xa4d, &(0x7f0000000500)={0x0, 0xff8d, 0x10, 0x1, 0x3e1}, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="78000000100003042bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005000128009000100766c616e00000000400002800600010002000000340004800c000100ff030000080000000c00010000000000e1c5ffff0c00010800040000000000000c000100070000000900000008000500", @ANYRES32=r3], 0x78}}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) 1m7.247030751s ago: executing program 5 (id=7408): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lsm_set_self_attr(0x68, &(0x7f0000000340)=ANY=[@ANYBLOB="17750435944e815d59fe0000000000000201000000000000e2000000000000002c31bb61272ec3c29ddaa4193ab29aef98287f926de2e819dd75440fbbbce667dec5ee337adea78f213372b1000332f65780306ba0f33a23399e2240773608377007bc2a6c3a1b370421aacb0ba0275620ad939c40890c6ca5b16c9f25fde31581ed59fecc3220aa4088feb7c979450a904e271665c767ee1ce7cbe30264c08067467114b4ac7fc77a0e33eece9879ed0646b5861b54da2ee7250fab5ef1bd514097faebd58ad1d6a8656e9b31b976696b8af8f05bb44fb6d62e890000000000000000"], 0x102, 0x0) 1m7.214215873s ago: executing program 5 (id=7409): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000440)="97e8e909ef8ed70010c2bb245f4d2d6ae7f1d45ec6efbf3fccb0571effedeaf6abb1fe177388794aae5e9796", 0x2c}], 0x1}}], 0x1, 0x4000800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x128, 0x0, 0x0, 0x128, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'geneve1\x00', 'wg1\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0xfd}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6, 0x4}, {0x0, 0x5}, 0x9c, 0x7}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0xa, 0x8, [0x34, 0x2c, 0x39, 0x2a, 0xf, 0x2f, 0x3a, 0xd, 0x30, 0xc, 0x25, 0x3d, 0x11, 0x5, 0x25, 0xb], 0x0, 0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)="041559", 0x3}], 0x1}}], 0x2, 0xc044) r4 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) write$binfmt_misc(r3, &(0x7f00000000c0)="b1e79d188eaf941c70", 0x9) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x4000, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xb4, 0x8, 0x24, 0x6d}) syz_io_uring_setup(0x6c1, &(0x7f00000001c0)={0x0, 0x403f, 0x400, 0x3, 0x24e}, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0xa6e, &(0x7f0000000300)={0x0, 0x6963, 0x0, 0x2, 0x22c}, &(0x7f00000003c0), &(0x7f0000000400)) ptrace$cont(0x20, r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m7.054226202s ago: executing program 5 (id=7412): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000040), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="01800000200001030000000000000000020020044400000100000000080002000a010101"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001005fc0000e573dd482fcde1661000"/28], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1m7.048559362s ago: executing program 3 (id=7414): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x16\xfd\x9c\x84\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\x97d\x00\x00\x00\x00\x00\x00\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x00\x00\x00\x00\x00\x00\x00\x00\x03\xc23l\x9c\xda\xed\x98\x0fK=X\xfdY\n\x0e\x00\x00\x00\x00\x00\x004\xd8\x1e\xa7\nEJ\x9b\x1bb\x80|`\xfb\x16\xcf5F\xac\xae=r\x8c)\x97\x9e7\xd7\x01\x0e\a\x17F\xb8\x1eD\r-\x11o\xa1X\x90\x8f^\xf0S\xb2\xce\x06\xa4\x8e\xc6\x9a:\xd9\x02\x90\x8db\xee\xc7}\xb0W\xea\xcbm\x17.%\"\xec\x9d\x90\xb7[W\xce\xb9^\xa3|\xd4\xeb\xc1\xcd@\x15n/\a\x00\x00\x00O\xaf\xee\x88W\x0f00~\xf2\xe9\xcdm\xb9e|O.\xc8\x85\x1a\xe9\xcf\xe5\x1e\x86\xaa\xed|\x15i\xeb4pv\"\fd\xa4\xf4\xc0\xac\x8eO\xb8\xa8\x8e\x9c\x0f\xf9\x80\x90\xdf3[\xee\r\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\a\x89L\xd7\x84%\x8cY\xfe\xed\x83!\xa0\x91\xf2\x00o30N\x16\x03\xe9\xe2-\xe9\x0e\xca\xdb\x89\x04\x12\xf1\x13\xcf\xd3\x93\x9c\x12\xbf\xb4}\x15`6-\xf1$\xabL\x14\x84\x98\x9d\xc3G\xc7lI=\xb4\x1c\"\x81\v\xaf\xf3)\xa8&\xd1\xe7\xbbk=\xe4\xbbI0P\x0e\xf3\xbb\xf0\x96\xa3}\xb6\x1e_\x97\x14W\x82@\xb4+\xd8\xec\xdf\x8b)M\x91\xb2\x8a\x14\xfb\xc5\xa4\xc5p\xf3\x99H\x02\xc8\x1e\x9f\a\xfel\xf6\xf5\x8b+\xea\xbc`\\\xf3L|\xf4\xafI\x92 \xda,\n\xaf\x96&\x86\xd5\xfeZ\xf4\xc2\xed\x7f\xc8R\x9ap\xe4P\x9f\x06\x0f\x1b\xda\xca\xd4\x81C\xb81\x8c\xdc\xfc]\xdd\xb7S(x\xdf>\v\x15wm\xfa\x8bS\xdf\xed\xe0\xab\x8d\xf0 \xfcU\x13!\x11\xfb*\x86\xe9NF\xa3/`|Fx\xb5\x06y\xe1\xe6#W\xa4\xf5\xc7\xf8\x99\aX\xd5\xd9}n\xf3L \x1b\xd8}U`\xd3\xfeb\xab\x11tz\xf3\xd9l#\xf2R_\x19\xb0\x18\x1a\xf7\xf6\f\xa9!W\xde\xf2\x8a\xd2\xc8\x82\x19T\x03\x88e\xf4\xa9\xdf\x18\xba\xdd\xdd6\xde\xbcc\xf7,\x8c\xaf', 0x2) fcntl$dupfd(r1, 0x40a, r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x0, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r2, 0x1000, {0x0, 0x0, 0x0, 0x4, 0xe3f, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1371a787e8dbe53ea6a4496e3a2500640bd3fe3955800cad3d0099cebdc25f570659f6b222831aaf904ab1f010000000400", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5c7f84b73ff00c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) 1m7.048415492s ago: executing program 4 (id=7415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1m6.989553626s ago: executing program 3 (id=7416): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$binfmt_misc(r0, &(0x7f0000000700)="5d436260c3778568f7f0306ae409b42d35876e5499adfb20a0bd143f85398d427b0b52627d73f53f0cb10ab934939d1063ba49e3ae041cd2c99b94e00afbea34bbf9dda319d3a8fce081fd4730a33a74fc7b1bebfb35095dcc32a77fdbf58fd7c976799025bee4ce72d9598958b2c07849c580484893d104fbe2b564ed1f4d9e0aa240417142b7d9414dc2fcf55e41ba7d43acefe154921d2a7193dbe682bce9f5cc04c896aaf424ef632c61878898e92d20b0918f9a0e034fcc46391b759238e2588a2fbd17ad9c0e7028ae3dbb3618526e43095934f7865947fb8cedebffc1d180394228a864e7f75f23da4577b525860d9192a0a3955329eed17eaa2b954a4c2c51fd9d3b9a4e2c372cfb8f735b4a87b2ba289d1de8049eb00330ac16d40b198b106b466af0cb8babee538d6f24451382ac124e3bde5093142e672f9e2a44510c0d929ebc37cffde78faad8a8df73374d67db991230a5886749ea2bb83434b9017f720cd60e73a243c528c9dba8a03d145a23f1252ba993f075f78c97336af47d0d8d893fcd740acd3509b1a3f5a603a6fa0d1dadb78d2e24bdc6acb75a8087c62442b69198fe98e493573f30171c530e98671f5b66f6dcac4f5eaf6b330167f86a791dcad3b5f09bc2d94c893b5ba57d93d065cb49296caa0f88169b38a0d60429813cb8da1db7161f37300c40d8151e66a1bccdd50345e0f4a6defac46ee8fb05d12846ad2dce22c410fab8998911bcbd4363024bd1b8ae377ab2730b8f9c5e97fbab8b6d012ebff2ae858ffd0f1defb96bd0f0407d9da53260031d25b736ee4b0b55d6a015dfab4cb778e3eec1395ad52138d5bfc74739bb74275e0e3db69aae2b531e7a2895b9d12df3e0e569bb2856181f08f6af30b6824a61571e23ab9076d796e764375b9eaaaa8a2aa797243e60bb91a612970f9fae3f049bd7b0a0e14913e1c5aa980e2c6bee69e62c57fba2b22077bfee65313f636f4dcf07e092cd9fbd260429d9d03636a71070e47cc7e841b20defcfcf97a500aff99a2745fde5bf05121ca58b762fa605e75856b6e483f30bd6ced5048f4af205b9ecf635a51ae6fc4cb1f1c46772427b2f77e3f28f998c946b364afdfa145bdf868cf07ce19cec7a5a119f5941e15c7535e98c5efddf67f030a312c748294bdf9a8451cf8f5632e11435d837ddc07f78d7b843acc5c780ebafea2aca04b12af6e30d2d3aee8b58735cd323ebff73354ae783a995f071c34b483b2318d899ea7d43c8ecfff4cb939c830fd4825b1e0a10ba859d31a657a2c5137537f74c8906da48b56ef9a331d0fe78c9750f7f9e4a86e8e40f0ffe08bce226126b33ff571697a69d1ae5597a14bef6863391a9f7672d4af56f45f4ecf090e251adbdca452dc23f43dad9fad476caf2db63da9cccaeb152ee402becf8f3dcb3caaad3af34f552bc41d9dd7d09c5aa9c6ecd6de923a23136d1094a443d810657b3a7ce71b6d0f2e762784bebf912aa5f3eeb3a98bceea769c1e895fa756d5146a43b0b03516973106e8963622760a4a80ac0c9de68607cecdb5d66edf5f8efafe9381d18d2675e729c272ca7ca99a8325c18f8ecc9c225af7d963ff7abcebb75a8a4db9936ede7bef31245f4876d6ed7b63c51d8cb486f0d41d709eead37638cc38d71288e7f0d2de03dd31ff163f89cb48b17a398417ebd3676a853795309d43790bc493a1371e5f721c6aaac331001a03a00ecd1850a778c07d60daf9334c7ed3564482c42c88468191bd56bc486784788095b75efb8ece6dbff185a900771047272794a0cb34d2a9fe10c360cd4a25d62b9ff1b225f39e999d4802f293d6a8bd4feac4d92f0013eb29b17e4fba70a818c7705a75ee162ccdf3f342cac1f992f0e83e0986be8429007e67bb97a806eeb2fb23baa5651cc66246ee6563236737d0f5014d06e1a68e2110281d4f144a0a0aea0905a4e97d5568fb6c5345f04df7c59120d48a948b29ffa78dce32529cd1401e6bdf6ab23d14a5210255b779d11e97e857a24aae3f45e10665f218f4c9864fb6b32a80657c6718c039ba0dc12e2c67e8fc8cd8f258beb716434abecb0dcf72290307e85faf58f8c11376df87c4b24b9139ad74fc9d3638bfba2a04b16439b709183523cfc4e219abf727831d7fbaf3fd492624f386d5bdf7f30e85909d1e714f111c3d1f4985c3a9de9c91832e60d90621116b2c9fd54cef24f95ee1fc39d1c7ef6147adde67084a7880775def9b83e57bd336a9d253ca6d914aaf79efafc09aa4f8f4abed782bbf3de6e962e4a18bfdfe631fd1393a544a177ac00cfa540ebf873b702a4eb712d564002db49f7476f1f57614c35f94da27aafd7debe43cab6f2cffcef12099a35f5ee49356bcd092005372669bc915badb53786001fa8d2b35ceddaa097be51c5fe5c57103e36d182133d990679f3ed9e34ce34480e6ffabf6a598af23ea3222a68100367625881d3bcc61e6643ee07d48099a4dccf33887591dee2475c0aaa6d79a9da04d7dad10d981f02606add8cf5b9b0d670cd8b87c7e26dd3e00d6ee40433f884f22d4062a45d2b2435b6ebba22e4491cd91ad2200e7d3496212a55042adca2e2c9b50df90264ab38ddff46ff8b5a134c8eed2582c19accadeb5684003bbe34a5b269a26d6f82f55c4298e87664c829ea43398badd1bffa089036fc2c79c4d1a0e96b5a7a3f974506a703e39d0d443a3baae5ca84bf74c7b642af02d98dd6a75cf777ed514d978b3be432a21180b1ae69c9a357fdbb5caf8d783523b6c9930c69bd739db823c72c5bf40979d05346d24e9cb0dfe471126e8b30dbd083a463682d39278bc90dcdb202d2a5dd9d9b064c352c35765a6791b27241378d4117fadc1042eeb9b10defb588c53bbb1a11cc9b39269c3cd53c3f41265927dc698f91598de853930a1790b0fcf86cf8df4938dfe434cf2563f2d4dbb01f2a4578cc5a524199253e8c33a854835ff48ee000cd7cedf90c507d8a85b7e7352b21e0befed244248a9d645653fc1be559b2647f6ca78dae8350b75e8045c650dbf523144d92421c29471b10e3d6add28e8aca1fc859bfbfac0976f836acc0e38d746744954cb019a49d09db7da7315367eca8b3a2819efaf273f6fc9d26d6f9bcb45d055f1f459714bc17dca18daca10bda6858403f0d3863b488b1967e2f00e07ba6269449ad9793f84e04c874bbc12a2972fd543b46ec7cf241bbddc9a214dc3f1392895082a1fa3e975f9eb81b2fd3923bf64f81dd30ebc06c0dfaca561f848c80186d24ac775c6dbee97ad9489f4d147a9e5dc5a29c584e5374701aa33a9c8f2348593c47468d50f920b9f341f40e311af965ff2e11ccaeb41d128b9cdf6a9efb5aa9a880c5d4dd5e16aa87185212b716996fd44311b0116547c427dd29533db69877f199bbefe5f4148aa57a7d3c9517075d696c5def4a55984479f7d82792b5a7c1ab2274cca60bdba36e89bf298c00c157e2db9e3f265fa3a82a9388d8672867e74733079d5fe279f1f9696ee23219262e49637e22c28ed6d7aa1ee29d37542c29e0297893ddf420f69d2632e47d88eb61cff3936218b8c3cb7eb66ac404b749a5b032bed9ce40d84618aed4b6edc0c441f21a25f9f7faf30e2c3051538a5cce02b93e50cea3e3343a56bf5f9955e0c6ebbcc05c5741dfd157050a246fd0b8de068afeca27215b202772ed4817392a2a958e687dbde7b78ad32b3479824f4915d675421ccb7dbba4d39a51d79b84b0c8f5e2ce1d01aa1a9d57d0e13f2f7c47a7f3fcbd97a5ba28f5f7c02049213386ef785c2668e153d7c9ef3bc5a5c3b561725a9f03919b7b7efeedc7d9eb6607928323afa52fc54a3090928ba3b5e0094bfe949c06653ba47db2a0c30fec3a3de6950e75f6b65854bd63beb74a4463054766b871668cc53ed371ac857cac6d68571d86e8a0d58109d62accb781b3a64bc21e3812e997316bf3356bfdd21d576cb859ca44aa2531d0cadefe1c116a8914f21fe4868a2ee110d39b81bacd3b2cbbe29d0e10f2a20556547ab36a569fda407c740f99535455a546a84512c7354de2cd0d194d767bbd68dc38eaca86c9882bccb47a173063bc55475642ef5b080cbd469996b3a62ddd378bb66e29bad6641b9d1deda15a2b8bc09394779f702e54a91aa46d969815e5f92f990f9bfabcd8447bdf2bbfa3b4b8db7390bc302fd3d6deaec67188b1cf3f4f99908a8aa7438a62623c2ba4747a0d2360db18abddb66df7a3bbd3d8adb677a0eb41da7ded622af1d55e86a831e59c4c684708393587d97b0da4d024ce56d71bd717eaa45da43e230f19c8a95d6d7c8ce57a985576aa40a70d1a0013b029bd900e9b5ffe85ab857fd49fa0fd4b48841449bbd8678bf49da23a21694704adf16fe7ab469f9d6b7380e80c7d38888580f9774b17d99c3a1d622cde44032cb66c0e691226fc7d8b3a042b73bd4c0c5049fe412251989f3db748ef0ea7943c2a5ab64955837240af92688c4952d50474d1c16cc60c2e88542b44e288daadfeb16d6a91eb9a81c3dffe0d87212f6b61c0364119560bfde312f6036e106e943d609b706646bcf1aab12320f3843cb3a57c4dfbf46c2bdb6242c83a2a581ffac2752428c1b7abf9ea0c33b49e97b8906f5370a095e301fac60e95b0e14ebaad10123974165883cedef83c3bed6744d3b66ad25519c5dfc490c4acd1a733c86ed922b7ad1d77053c0a57b48ca5a2b60678eccd3a43ae5f6eebc0e96c15e21597b4a49c4177087322aceef9e409f393d0d4caebc4e19430c24b0bd3ca9d6ff41e0d098f56234302988d4386e08164f02e9b5d216043d40ff919d4f8f25ef5b767713d2113dc403f63032952aa68d49431c31e3a2e51ca1050ae6c6a75059b59457809cb253b1f3063ce6295a7b9f2222e025457b312d7fe62b711c1cc1aa16fa6e71e281279042192c76b3dc2b8e9279ff7f9b6e2c7a83618f9b66f6aba8a37e2e182b4d8b16296e5b1c65e665817fa79254e35b8bc39571b273eb64e580b2d51a5544c9f39a57efbb79f5311900c0e5e61c9eeac05d289b2a2b5d7eb025feff5a2f6ba6be5a44f87081b260e0dd2d83ce8e64618883522e3f2774e5847787a64bcf08cb97b1d2c4cd115b2beca9c8a467d51f105898042a8aa866a0689d9186226abe5c3dccb398e668a2fe3e36618528c8a9674d0bc997943ceea94fa8177a15759ee30fca3d395a59f54cc91fff303b0f5526bcfb4a8ca57a0cc8dcbd11c99dfb48e22d99769aebc21ec538183d3e2caf802427153f9cd9eebc5c186fef54ee46f63c1c539d37ceef116ed3fd7ed7bf7301c6a35cb9dc1d07eb42dd15f7d64c952afff384a1b76c78c1efbb40d603c57b244209fbe911e3add0b40ef33c5f92b92b8c7a357bb1bfb254c3e6f88778f11db9566f644a3620dada2c221fea14bbefd3a54f3c1c33364c6d6ca6f3e139572eff1aed8117fb1cad15650662ccc9bb20c0e08cf332e0df0252cecf0ff08e9b72c90229c7d18f25b66c6930d85499b59b6c5075d0d4e20a1e6c1586dcdacceccf801ff88bb90c952125bd617acd4f1744437b3ecd6f8a4d0f85a9036b088f08d259431df5c12be558e0b69afa796a8a74c37c97443d754b95185d5805fa2f064ca796fb60a5ab4ba90eb8ac276a1e1eb5a4f268674ec871025cb4725762c90ac06d0a695d433ed51e6e374e3f63f5fb91844f8ab752ea0ea22291d0166914083048001c9489bcae3310224960d52d84522d87f40d0215f81cf85c5321161c84d8246cb9ea2ba722cbdf266dfdf2e", 0x1000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x80) ioctl$TIOCSBRK(r2, 0x5427) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) 1m6.974279697s ago: executing program 4 (id=7420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x4}}]}, {0x4f}, {0xc}, {0xc, 0x8, {0x60}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m6.954156188s ago: executing program 2 (id=7421): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000780)={[{@nocompress}, {@cruft}, {@check_strict}, {@gid}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") 1m6.889261822s ago: executing program 3 (id=7422): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x36a9, 0x9, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) timer_create(0x0, 0x0, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x40, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x8, 0x6, 0x4, 0x0, 0x0, 0x7, 0x7a1}, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req={0x66c29e2d, 0x8, 0x0, 0x1}, 0x10) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/268, 0x10c}], 0x1}, 0x20) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x40002, 0x803a0, 0x1, 0x101}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r9, 0x0, 0x0}, 0x20) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x27, 0x7, 0x2000}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) 1m6.888869262s ago: executing program 4 (id=7423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a3000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 1m6.75560393s ago: executing program 2 (id=7425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff7bb, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x80) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff7bb, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0xfffffff9, 0x4, {{0x26, 0x4, 0x3, 0x25, 0x98, 0x64, 0x0, 0x5, 0x2f, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xc8, 0x3, 0x9, [{@multicast1, 0x3}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xb}]}, @timestamp_prespec={0x44, 0x2c, 0x19, 0x3, 0x3, [{@rand_addr=0x64010102, 0x8}, {@multicast1, 0xd1}, {@local, 0x4a2a}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x9, 0x0}, 0x10001}]}, @lsrr={0x83, 0xf, 0x39, [@empty, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x27, 0x38, [@broadcast, @empty, @loopback, @local, @multicast2, @private=0xa010100, @multicast2, @rand_addr=0x64010101, @local]}]}}}}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r1, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0xcb}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ldst={0x0, 0x0, 0x1, 0x0, 0x6, 0x4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m6.75052004s ago: executing program 4 (id=7426): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x18, 0x80}, 0x0) 1m6.334680694s ago: executing program 5 (id=7428): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source\x00\xb5a8\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x00\xff\xaar\t\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f0000000a40)='.\n$)|-\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n:/<\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xffb\x0f\x04\xb7\xce\xc1\xfbTX\x91P\x1f\x19\xf9\x12\xa5)', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\t\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f00000004c0)='.\n$)|-\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n:/<\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xff', 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt(r2, 0xb8df, 0x3, &(0x7f0000000180)="96fecffa459fe09328768194b8a07e841ea62b978f6bd64d08eafe1664104b", 0x1f) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x7, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) getpgid(r6) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e1406020000000d0e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m6.127148626s ago: executing program 2 (id=7430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) 1m6.07212269s ago: executing program 2 (id=7431): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @remote, @val={@val={0x88a8, 0x6}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x1, @empty, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2000, 0x0, 0xd4, 0x8}, 0x9c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4048000) renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) 1m6.001443214s ago: executing program 4 (id=7432): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f0000000180)="$eJzs3U9sI1cZAPBvJsnau02bXegBUKFLKSxotXbibaOqQqKcqoIqIXrksA2JE0Wx4yh2ShP2kD0icUSiEic4ceaAxAHUE3ckDnDjUg5IBVagBomDkcd26vxxEoXY3tq/nzTye/PG8723o3lv9lmZF8DEuh0R+xFxLSLejoi5zv6ks8Vr7a113EePHy4fPH64nESz+dY/kqy8tS96vtPyVOec+Yj47usR30+OBf1jRH13b2OpUilvd3YVG9WtYn137956dWmtvFbeLJUWFxbnX7n/cunK2vp89VcfXo+I3/7m8x/8Yf9rP2xVa7ZT1tuOq9Ru+sxhnJbpiPj2IIKNwFSnPdcu8+VLfYmrlEbEpyLihez+n4up7GoedfQyfWOItQMABqHZnIvmXG/+DF9/43e3zjwAAPgkSLM5sCQtdOYCZiNNC4X2HN6zcSOt1OqNu6u1nc2V9lzZzZhJV9cr5fnOXOHNmElW16fLC1m6m6+US8fy9yPiVkT8JHc9yxeWa5WVUT74AMAEe+rY+P/vXHv8BwDGXP7jZG6U9QAAhic/6goAAENn/AeAyWP8B4DJY/wHgMlj/AeAyWP8B4CJ8p0332xtzYPO+69X3tnd2ai9c2+lXN8oVHeWC8u17a3CWq22lr2zp3re+Sq12tbCS7HzbrFRrjeK9d29B9XazmbjQfZe7wflmaG0CgA4y63n3/9zEhH7r17Ptuh53/+5Y/Vzg64dMEjpxQ4zQwhjaGrUFQBG5uRqX8CkMB8P9CzR+6hnd/5E4rj3LnT61Lqh8OS589lLzP/7TwOMhVPn/63LDhPhcvP/nuVhHHiUh8nVbCb91vz/8Uz3EABgrPj9H0jOKe/9/X++2ZO52O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMJZmsy1JC521wGcjTQuFiKcj4mbMJKvrlfJ8RDwTEX/KzeRa+YWIsG4QAHySpX9LOut/3Zl7cfZ46bXcf3LZZ0T84Gdv/fTdpUZjeyHiWvLPw/2N9zr7S6OoPwBwnu443R3Huz56/HC5uw2zPh9+s724aCvuQWdrl0zHdPaZz+Yabvwr6eTbWs8rU1cQf/9RRHzmtPYn2dzIzc7Kp8fjt2I/PdT46ZH4aVbW/mz9W3z6MsG/dd6qrzDe3m/1P6+ddv+lcTv7PP3+z2c91P+v2/8dnOj/0sP+b6pP/3f7ojFe+v0bJ3Y259pljyI+Nx1x0D15T//TjZ/0if/iBeP/5bkvvNCvrPnziDtxWvuTI7GKjepWsb67d2+9urRWXitvlkqLC4vzr9x/uVTM5qiL3Znqk/7+6t1n+sVvtf9Gn/j5c9r/5W5m/+z2/+K/b3/vi2fE/+qXTr/+z54RvzUmfuXssIeWbvw636+sFX+lT/vPu/53Lxj/g7/urVzwUABgCOq7extLlUp5e9CJdPAhskQSsT+E5rQTuV/+6PVhxRpgIp6Makg8SYlR90zAoH1804+6JgAAAAAAAAAAAAAAQD/D+HOiUbcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8fW/AAAA//8RdMtJ") socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$unix(0x1, 0x1, 0x0) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000a00)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000009c0)=[{0x2, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/128, 0x80}], &(0x7f0000000880)=[0x9d5, 0x0, 0x101, 0xc2, 0x1, 0xfffffffffffffffb]}, {0x1, 0x1, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/127, 0x7f}], &(0x7f0000000980)=[0xce, 0xfffffffff90fce24, 0x0, 0x5, 0x0, 0x6, 0x6]}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0x0, 0x0) 1m5.856004732s ago: executing program 3 (id=7434): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00ef00", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2040080) 1m5.811204235s ago: executing program 2 (id=7436): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x2300, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m5.697450112s ago: executing program 2 (id=7437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, &(0x7f0000000340)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffd, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 1m5.696897612s ago: executing program 4 (id=7438): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0xa110, 0x10000, 0x9, 0x5, 0xc, 0x7, 0xa, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, 0x0, &(0x7f0000000400)=""/198}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'netdevsim0\x00', 0x0}) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000130000082637b497e0700e5763242237", @ANYRES32=r10, @ANYBLOB="0100000000800000140014006d6163766c616e300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102382, 0x18fee}], 0x1, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000fedbdf25050000000800030004000000080002000509"], 0x24}, 0x1, 0x0, 0x0, 0x60008801}, 0x8a4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000f23701df6850f7dfefc54507b6e7e02216d009873f8441b136610b525e4eab16cf6295f010f350fef98c81547102", @ANYRES16=r13, @ANYBLOB="080028bd7000fddbdf2503000000050005000100000005000500ff000000280006801400040000000000000000000000ffffe0000002060005004e240000060005004e22000008000300020000000800030004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1m5.696588782s ago: executing program 6 (id=7439): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="eea7460dd48e6e87c6bce4f3b8edd6"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1m3.645112232s ago: executing program 6 (id=7440): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) syz_usb_connect$hid(0x2, 0xfffffe85, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="588addb04cdce416", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200000000000000) 1m1.927615352s ago: executing program 5 (id=7441): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1m0.713464023s ago: executing program 6 (id=7442): write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f00000003c0)={0x0, r3, 0x19, 0x0, 0x2, 0xf7b}) fallocate(r2, 0x0, 0x1, 0x2000402) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x46000) listen(r0, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) 48.27385672s ago: executing program 40 (id=7434): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00ef00", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2040080) 45.633897824s ago: executing program 41 (id=7438): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0xa110, 0x10000, 0x9, 0x5, 0xc, 0x7, 0xa, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, 0x0, &(0x7f0000000400)=""/198}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'netdevsim0\x00', 0x0}) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000130000082637b497e0700e5763242237", @ANYRES32=r10, @ANYBLOB="0100000000800000140014006d6163766c616e300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102382, 0x18fee}], 0x1, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000fedbdf25050000000800030004000000080002000509"], 0x24}, 0x1, 0x0, 0x0, 0x60008801}, 0x8a4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000f23701df6850f7dfefc54507b6e7e02216d009873f8441b136610b525e4eab16cf6295f010f350fef98c81547102", @ANYRES16=r13, @ANYBLOB="080028bd7000fddbdf2503000000050005000100000005000500ff000000280006801400040000000000000000000000ffffe0000002060005004e240000060005004e22000008000300020000000800030004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 40.883522021s ago: executing program 42 (id=7437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, &(0x7f0000000340)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffd, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 39.232620128s ago: executing program 6 (id=7446): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000740)={0x0, 0xffffffff, 0x0, 0x10000, 0x0, "fe94160000000000000000000000001000"}) 37.694021308s ago: executing program 43 (id=7441): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 31.345544648s ago: executing program 6 (id=7448): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000340)=ANY=[@ANYBLOB="17750435944e815d59fe0000000000000201000000000000e2000000000000002c31bb61272ec3c29ddaa4193ab29aef98287f926de2e819dd75440fbbbce667dec5ee337adea78f213372b1000332f65780306ba0f33a23399e2240773608377007bc2a6c3a1b370421aacb0ba0275620ad939c40890c6ca5b16c9f25fde31581ed59fecc3220aa4088feb7c979450a904e271665c767ee1ce7cbe30264c08067467114b4ac7fc77a0e33eece9879ed0646b5861b54da2ee7250fab5ef1bd514097faebd58ad1d6a8656e9b31b976696b8af8f05bb44fb6d62e890000000000000000"], 0x102, 0x0) 17.100590611s ago: executing program 6 (id=7449): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) setgroups(0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1800}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 44 (id=7449): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) setgroups(0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1800}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): ][T21314] ? __pfx_default_wake_function+0x10/0x10 [ 361.583971][T21314] handle_mm_fault+0xb40/0x3030 [ 361.584014][T21314] ? vma_start_read+0x1c7/0x2c0 [ 361.584054][T21314] do_user_addr_fault+0x62f/0x1050 [ 361.584077][T21314] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 361.584096][T21314] ? irqentry_exit+0x3c/0x510 [ 361.584123][T21314] exc_page_fault+0x62/0xa0 [ 361.584224][T21314] asm_exc_page_fault+0x26/0x30 [ 361.584245][T21314] RIP: 0033:0x7f6e5a9db838 [ 361.584303][T21314] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 93 19 00 00 0f [ 361.584317][T21314] RSP: 002b:00007ffc82dd7790 EFLAGS: 00010206 [ 361.584387][T21314] RAX: 0000000000000000 RBX: 00000000000001c2 RCX: 00007f6e5a995ed7 [ 361.584402][T21314] RDX: e1dbe39d966b2300 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.584413][T21314] RBP: 00007ffc82dd77fc R08: 0000000000000000 R09: 0000000000000000 [ 361.584424][T21314] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 361.584435][T21314] R13: 00000000000927c0 R14: 0000000000058184 R15: 00007ffc82dd7850 [ 361.584453][T21314] [ 361.812075][T21314] memory: usage 307200kB, limit 307200kB, failcnt 551 [ 361.818872][T21314] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 361.826838][T21314] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 361.834881][T21314] Memory cgroup stats for /syz2: [ 361.875297][T21314] cache 0 [ 361.883177][T21314] rss 0 [ 361.886009][T21314] shmem 0 [ 361.888932][T21314] mapped_file 0 [ 361.892460][T21314] dirty 0 [ 361.895426][T21314] writeback 0 [ 361.898701][T21314] workingset_refault_anon 2116 [ 361.903489][T21314] workingset_refault_file 1372 [ 361.907980][T24315] validate_nla: 2 callbacks suppressed [ 361.907993][T24315] netlink: 'syz.5.6716': attribute type 17 has an invalid length. [ 361.908299][T21314] swap 376832 [ 361.908308][T21314] swapcached 4096 [ 361.913789][T24315] __nla_validate_parse: 9 callbacks suppressed [ 361.913801][T24315] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6716'. [ 361.921540][T21314] pgpgin 674329 [ 361.921568][T21314] pgpgout 674325 [ 361.921574][T21314] pgfault 380503 [ 361.921581][T21314] pgmajfault 314 [ 361.921588][T21314] inactive_anon 0 [ 361.921595][T21314] active_anon 4096 [ 361.921601][T21314] inactive_file 0 [ 361.921608][T21314] active_file 12288 [ 361.921624][T21314] unevictable 0 [ 361.921631][T21314] hierarchical_memory_limit 314572800 [ 361.921639][T21314] hierarchical_memsw_limit 9223372036854771712 [ 361.921647][T21314] total_cache 0 [ 361.921654][T21314] total_rss 0 [ 361.921660][T21314] total_shmem 0 [ 361.921667][T21314] total_mapped_file 0 [ 361.921674][T21314] total_dirty 0 [ 361.964448][T24315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.966236][T21314] total_writeback 0 [ 362.018420][T21314] total_workingset_refault_anon 2116 [ 362.023754][T21314] total_workingset_refault_file 1372 [ 362.029072][T21314] total_swap 376832 [ 362.032883][T21314] total_swapcached 4096 [ 362.037079][T21314] total_pgpgin 674329 [ 362.037898][T24315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.041074][T21314] total_pgpgout 674325 [ 362.052918][T21314] total_pgfault 380503 [ 362.056981][T21314] total_pgmajfault 314 [ 362.059467][T24315] netlink: 580 bytes leftover after parsing attributes in process `syz.5.6716'. [ 362.061035][T21314] total_inactive_anon 0 [ 362.061044][T21314] total_active_anon 4096 [ 362.061052][T21314] total_inactive_file 0 [ 362.061060][T21314] total_active_file 12288 [ 362.086964][T21314] total_unevictable 0 [ 362.090937][T21314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6703,pid=24267,uid=0 [ 362.105762][T21314] Memory cgroup out of memory: Killed process 24267 (syz.2.6703) total-vm:94000kB, anon-rss:1236kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 362.120101][T24319] loop4: detected capacity change from 0 to 8192 [ 362.130441][T24320] loop6: detected capacity change from 0 to 256 [ 362.154228][T24320] FAT-fs (loop6): Directory bread(block 1285) failed [ 362.172009][T24319] vfat filesystem being mounted at /384/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 362.211147][T24320] FAT-fs (loop6): Directory bread(block 1286) failed [ 362.218374][T24320] FAT-fs (loop6): Directory bread(block 1287) failed [ 362.244979][T24320] FAT-fs (loop6): Directory bread(block 1288) failed [ 362.275769][T24320] vfat filesystem being mounted at /152/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 362.311031][T24320] FAT-fs (loop6): Directory bread(block 1285) failed [ 362.319937][T24320] FAT-fs (loop6): Directory bread(block 1286) failed [ 362.327757][T24320] FAT-fs (loop6): Directory bread(block 1287) failed [ 362.335995][T24320] FAT-fs (loop6): Directory bread(block 1288) failed [ 362.342800][T24320] FAT-fs (loop6): Directory bread(block 1285) failed [ 362.350578][T24320] FAT-fs (loop6): Directory bread(block 1286) failed [ 362.375857][T24328] lo speed is unknown, defaulting to 1000 [ 362.451294][T24335] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 362.468623][T24335] SELinux: failed to load policy [ 362.809364][T24347] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 362.828310][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 362.828324][ T29] audit: type=1326 audit(4147485152.968:19052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 362.854538][T24347] SELinux: failed to load policy [ 362.858922][ T29] audit: type=1326 audit(4147485152.968:19053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 362.887468][ T29] audit: type=1326 audit(4147485152.968:19054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 362.911173][ T29] audit: type=1326 audit(4147485152.968:19055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 362.935870][ T29] audit: type=1326 audit(4147485152.968:19056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 362.938450][T24353] 9p: Bad value for 'rfdno' [ 362.959599][ T29] audit: type=1326 audit(4147485152.968:19057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 362.988294][ T29] audit: type=1326 audit(4147485152.968:19058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 363.004779][T24357] loop4: detected capacity change from 0 to 512 [ 363.012853][ T29] audit: type=1326 audit(4147485152.968:19059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 363.041910][ T29] audit: type=1326 audit(4147485152.968:19060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 363.042728][T24357] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 363.066327][ T29] audit: type=1326 audit(4147485152.968:19061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24343 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 363.074404][T24357] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.128181][T24357] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 363.168764][T24357] loop4: detected capacity change from 0 to 512 [ 363.181225][T24357] ext4: Unknown parameter 'nouser_xattr' [ 363.255766][T24370] EXT4-fs (loop4): 1 truncate cleaned up [ 363.284826][T24373] team0: Port device dummy0 removed [ 363.290418][T24373] batman_adv: batadv0: Adding interface: dummy0 [ 363.296736][T24373] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.322104][T24373] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 363.325747][T24377] siw: device registration error -23 [ 363.384230][T24379] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.6744: bad orphan inode 134217728 [ 363.662132][T24410] siw: device registration error -23 [ 363.663367][T24412] EXT4-fs (loop5): 1 truncate cleaned up [ 363.722785][T24420] tipc: Enabling of bearer rejected, failed to enable media [ 363.731778][T24422] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.738967][T24422] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.754508][T24424] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 363.770793][T24424] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6760: bg 0: block 255: padding at end of block bitmap is not set [ 363.803761][T24424] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 363.819678][T24427] vlan2: entered promiscuous mode [ 363.824816][T24427] bridge0: entered promiscuous mode [ 363.837629][T24424] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6760: invalid indirect mapped block 1 (level 1) [ 363.873939][T24424] EXT4-fs (loop6): 1 truncate cleaned up [ 363.885976][T24424] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 363.952580][T24441] EXT4-fs (loop5): 1 truncate cleaned up [ 364.074360][T24462] bridge0: port 3(veth0_to_bridge) entered blocking state [ 364.081584][T24462] bridge0: port 3(veth0_to_bridge) entered disabled state [ 364.093516][T24462] veth0_to_bridge: entered allmulticast mode [ 364.117445][T24462] veth0_to_bridge: entered promiscuous mode [ 364.161229][T24476] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 364.178645][T24476] SELinux: failed to load policy [ 364.220550][T24484] vfat filesystem being mounted at /44/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 364.271696][T24484] netlink: 'syz.5.6780': attribute type 13 has an invalid length. [ 364.279623][T24484] netlink: 'syz.5.6780': attribute type 12 has an invalid length. [ 364.306591][T24493] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6782: bg 0: block 393: padding at end of block bitmap is not set [ 364.334508][T24493] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 364.345421][T24497] FAT-fs (loop5): Directory bread(block 1285) failed [ 364.352143][T24497] FAT-fs (loop5): Directory bread(block 1286) failed [ 364.359711][T24497] FAT-fs (loop5): Directory bread(block 1287) failed [ 364.360196][T24493] EXT4-fs (loop6): 2 truncates cleaned up [ 364.366784][T24497] FAT-fs (loop5): Directory bread(block 1288) failed [ 364.379609][T24497] vfat filesystem being mounted at /45/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 364.407066][T24497] FAT-fs (loop5): Directory bread(block 1285) failed [ 364.440555][T24497] FAT-fs (loop5): Directory bread(block 1286) failed [ 364.448123][T24497] FAT-fs (loop5): Directory bread(block 1287) failed [ 364.455341][T24497] FAT-fs (loop5): Directory bread(block 1288) failed [ 364.463605][T24497] FAT-fs (loop5): Directory bread(block 1285) failed [ 364.471212][T24497] FAT-fs (loop5): Directory bread(block 1286) failed [ 364.495677][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6787'. [ 364.517793][T24503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6787'. [ 364.585094][T24514] EXT4-fs: Ignoring removed orlov option [ 364.628988][T24520] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.671959][T24520] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6792: bg 0: block 112: padding at end of block bitmap is not set [ 364.686978][T24512] lo speed is unknown, defaulting to 1000 [ 364.693075][T24527] netlink: 'syz.2.6794': attribute type 13 has an invalid length. [ 364.701106][T24527] netlink: 'syz.2.6794': attribute type 12 has an invalid length. [ 364.701235][T24520] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 117 [ 364.721453][T24520] EXT4-fs (loop6): This should not happen!! Data will be lost [ 364.721453][T24520] [ 364.774753][T24533] siw: device registration error -23 [ 364.824263][T24540] EXT4-fs: inline encryption not supported [ 364.848533][T24540] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6798: invalid indirect mapped block 4294967295 (level 1) [ 364.871005][T24540] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6798: invalid indirect mapped block 4294967295 (level 1) [ 364.886756][T24540] EXT4-fs (loop4): 2 truncates cleaned up [ 364.899460][T24547] EXT4-fs: Ignoring removed nobh option [ 364.905916][T24547] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 364.948839][T24547] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6801: bg 0: block 384: padding at end of block bitmap is not set [ 364.983609][T24547] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 365.009190][T24547] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.6801: attempt to clear invalid blocks 983260 len 1 [ 365.030560][T24531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24531 comm=syz.5.6795 [ 365.062588][T24547] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.6801: Invalid inode table block 0 in block_group 0 [ 365.110472][T24547] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 365.132723][T24547] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 365.141567][T24547] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.6801: Invalid inode table block 0 in block_group 0 [ 365.159769][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6806'. [ 365.168824][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6806'. [ 365.178092][T24547] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 365.200509][T24564] set_capacity_and_notify: 12 callbacks suppressed [ 365.200525][T24564] loop4: detected capacity change from 0 to 2048 [ 365.201292][T24547] EXT4-fs error (device loop6): ext4_truncate:4635: inode #11: comm syz.6.6801: mark_inode_dirty error [ 365.235978][T24565] siw: device registration error -23 [ 365.254671][T24547] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 365.267219][T24569] xt_limit: Overflow, try lower: 268435456/134217728 [ 365.273446][T24547] EXT4-fs (loop6): 1 truncate cleaned up [ 365.291750][T24547] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6801: Invalid inode bitmap blk 0 in block_group 0 [ 365.346644][T24581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6814'. [ 365.389059][T24581] batadv0: entered promiscuous mode [ 365.389203][T24581] macvtap1: entered promiscuous mode [ 365.389325][T24581] macvtap1: entered allmulticast mode [ 365.389339][T24581] batadv0: entered allmulticast mode [ 365.390383][T24581] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 365.494827][T24593] xt_hashlimit: size too large, truncated to 1048576 [ 365.582656][T24601] bond1: entered promiscuous mode [ 365.587759][T24601] bond1: entered allmulticast mode [ 365.593152][T24601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.656334][T24593] xt_hashlimit: size too large, truncated to 1048576 [ 365.695264][T24605] netlink: 'syz.3.6823': attribute type 21 has an invalid length. [ 365.739666][T24605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6823'. [ 365.748851][T24605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6823'. [ 365.791202][T24612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6826'. [ 365.812107][T24593] xt_hashlimit: size too large, truncated to 1048576 [ 365.928822][T24588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24588 comm=syz.6.6817 [ 365.939765][T24620] macvtap2: entered promiscuous mode [ 365.947191][T24620] macvtap2: entered allmulticast mode [ 365.954084][T24620] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 365.999800][T24593] xt_hashlimit: size too large, truncated to 1048576 [ 366.034733][T24628] loop5: detected capacity change from 0 to 512 [ 366.076657][T24628] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 366.086624][T24628] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 366.240758][T24593] xt_hashlimit: size too large, truncated to 1048576 [ 366.468528][T24659] FAULT_INJECTION: forcing a failure. [ 366.468528][T24659] name failslab, interval 1, probability 0, space 0, times 0 [ 366.481278][T24659] CPU: 0 UID: 0 PID: 24659 Comm: syz.6.6841 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.481341][T24659] Tainted: [W]=WARN [ 366.481348][T24659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.481361][T24659] Call Trace: [ 366.481368][T24659] [ 366.481376][T24659] __dump_stack+0x1d/0x30 [ 366.481398][T24659] dump_stack_lvl+0x95/0xd0 [ 366.481415][T24659] dump_stack+0x15/0x1b [ 366.481487][T24659] should_fail_ex+0x263/0x280 [ 366.481584][T24659] should_failslab+0x8c/0xb0 [ 366.481605][T24659] kmem_cache_alloc_noprof+0x68/0x490 [ 366.481625][T24659] ? alloc_empty_file+0x76/0x200 [ 366.481707][T24659] alloc_empty_file+0x76/0x200 [ 366.481732][T24659] alloc_file_pseudo+0xf6/0x190 [ 366.481760][T24659] sock_alloc_file+0x9c/0x1e0 [ 366.481786][T24659] __sys_socketpair+0x23c/0x420 [ 366.481806][T24659] __x64_sys_socketpair+0x52/0x60 [ 366.481868][T24659] x64_sys_call+0x2df3/0x3000 [ 366.481891][T24659] do_syscall_64+0xc0/0x2a0 [ 366.481911][T24659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.481949][T24659] RIP: 0033:0x7f1b99eec57a [ 366.481962][T24659] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.481980][T24659] RSP: 002b:00007f1b98946f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 366.482001][T24659] RAX: ffffffffffffffda RBX: 00007f1b9a165f00 RCX: 00007f1b99eec57a [ 366.482017][T24659] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 366.482081][T24659] RBP: 00007f1b98947090 R08: 0000000000000000 R09: 0000000000000000 [ 366.482093][T24659] R10: 00007f1b98946f88 R11: 0000000000000246 R12: 0000000000000001 [ 366.482104][T24659] R13: 00007f1b9a166038 R14: 00007f1b9a165fa0 R15: 00007fffc36bbdf8 [ 366.482159][T24659] [ 366.618707][T24662] xt_socket: unknown flags 0x48 [ 366.722505][T24668] loop5: detected capacity change from 0 to 256 [ 366.723597][T24670] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 366.740183][T24670] SELinux: failed to load policy [ 366.766674][T24668] vfat filesystem being mounted at /57/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 366.803006][T24680] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.830538][T24668] syzkaller1: entered promiscuous mode [ 366.836321][T24668] syzkaller1: entered allmulticast mode [ 366.844793][T24685] loop4: detected capacity change from 0 to 2048 [ 366.847837][T24668] netlink: 'syz.5.6847': attribute type 13 has an invalid length. [ 366.859029][T24668] netlink: 'syz.5.6847': attribute type 12 has an invalid length. [ 366.973670][T24701] __nla_validate_parse: 6 callbacks suppressed [ 366.973686][T24701] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6858'. [ 367.069185][T24695] lo speed is unknown, defaulting to 1000 [ 367.131604][T24706] SELinux: failed to load policy [ 367.135025][T24708] netlink: 'syz.6.6860': attribute type 1 has an invalid length. [ 367.209580][T24708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.217717][T24708] bond4: (slave bond5): making interface the new active one [ 367.225560][T24708] bond4: (slave bond5): Enslaving as an active interface with an up link [ 367.273651][T24720] netlink: 35 bytes leftover after parsing attributes in process `syz.6.6863'. [ 367.276560][T24695] netlink: 'syz.2.6856': attribute type 13 has an invalid length. [ 367.282637][T24720] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6863'. [ 367.299528][T24695] gretap0: refused to change device tx_queue_len [ 367.306204][T24695] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.400710][T24728] loop6: detected capacity change from 0 to 256 [ 367.407994][T24730] program syz.4.6866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.421042][T24728] vfat filesystem being mounted at /173/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 367.449734][T24732] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 367.468746][T24734] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6869'. [ 367.479016][T24728] syzkaller1: entered promiscuous mode [ 367.484592][T24728] syzkaller1: entered allmulticast mode [ 367.499619][ T3976] hid_parser_main: 37 callbacks suppressed [ 367.499722][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.502190][T24728] netlink: 'syz.6.6867': attribute type 13 has an invalid length. [ 367.505643][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.513009][T24728] netlink: 'syz.6.6867': attribute type 12 has an invalid length. [ 367.536056][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.543665][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.551106][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.558503][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.565781][T24736] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 367.565993][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.572500][T24736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.572549][T24736] vhci_hcd vhci_hcd.0: Device attached [ 367.573589][T24742] vhci_hcd: connection closed [ 367.579979][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.590197][ T1677] vhci_hcd vhci_hcd.4: stop threads [ 367.592833][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.597565][ T1677] vhci_hcd vhci_hcd.4: release socket [ 367.604909][ T3976] hid-generic 0000:0000:0004.0008: unknown main item tag 0x0 [ 367.610092][ T1677] vhci_hcd vhci_hcd.4: disconnect device [ 367.620204][ T3976] hid-generic 0000:0000:0004.0008: hidraw0: HID v0.03 Device [syz1] on syz0 [ 367.656609][T24744] fido_id[24744]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 367.688672][T24748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6873'. [ 367.706512][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6874'. [ 367.754367][T24748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.764733][T24748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.772915][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6874'. [ 367.781883][T24754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6874'. [ 367.817100][T24748] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 367.824697][T24761] netlink: 'syz.2.6874': attribute type 10 has an invalid length. [ 367.837854][T24750] bond1: option mode: unable to set because the bond device has slaves [ 367.849021][T19320] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.858748][T19320] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 52975 - 0 [ 367.867954][T19320] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.877032][T19320] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 52975 - 0 [ 367.888450][T19320] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.897424][T19320] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 52975 - 0 [ 367.900465][T24763] xt_hashlimit: max too large, truncated to 1048576 [ 367.926800][T19320] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.927720][T24763] xt_CT: No such helper "netbios-ns" [ 367.935871][T19320] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 52975 - 0 [ 367.950278][T24766] netem: incorrect ge model size [ 367.955346][T24766] netem: change failed [ 367.974648][T24769] xt_hashlimit: Unknown mode mask 8800, kernel too old? [ 368.058581][T24785] netlink: 'syz.6.6884': attribute type 10 has an invalid length. [ 368.153872][T24788] loop5: detected capacity change from 0 to 512 [ 368.237728][T24788] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 368.264019][T24788] EXT4-fs (loop5): mount failed [ 368.341386][T24807] loop4: detected capacity change from 0 to 256 [ 368.360547][T24807] vfat filesystem being mounted at /413/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 368.749193][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 368.749205][ T29] audit: type=1326 audit(4147485414.894:19542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 368.779339][ T29] audit: type=1326 audit(4147485414.894:19543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 368.803494][ T29] audit: type=1326 audit(4147485414.894:19544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 368.827372][ T29] audit: type=1326 audit(4147485414.894:19545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 368.851605][ T29] audit: type=1326 audit(4147485414.894:19546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 368.875486][ T29] audit: type=1326 audit(4147485414.894:19547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 368.900018][ T29] audit: type=1326 audit(4147485414.894:19548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 368.924590][ T29] audit: type=1326 audit(4147485414.894:19549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 369.005826][ T29] audit: type=1326 audit(4147485415.154:19550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24811 comm="syz.5.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb6c494acb9 code=0x7ffc0000 [ 369.109045][T24824] loop4: detected capacity change from 0 to 128 [ 369.230693][T24824] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 369.268876][ T29] audit: type=1400 audit(4147485415.414:19551): avc: denied { create } for pid=24823 comm="syz.4.6898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 369.320644][T24840] loop5: detected capacity change from 0 to 1024 [ 369.369909][T24840] EXT4-fs: Ignoring removed orlov option [ 369.384646][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6904'. [ 369.427375][T24845] vlan2: entered promiscuous mode [ 369.483272][T24845] dummy0: entered promiscuous mode [ 369.648254][T24853] loop6: detected capacity change from 0 to 1024 [ 369.670569][T24853] EXT4-fs: Ignoring removed orlov option [ 369.760267][T24863] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6909'. [ 369.847715][T24869] netlink: 'syz.3.6913': attribute type 13 has an invalid length. [ 369.855620][T24869] netlink: 'syz.3.6913': attribute type 12 has an invalid length. [ 369.910067][T24878] sctp: [Deprecated]: syz.5.6916 (pid 24878) Use of int in max_burst socket option. [ 369.910067][T24878] Use struct sctp_assoc_value instead [ 369.929840][T24879] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 369.949731][T24877] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.961461][T24877] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.6915: checksumming directory block 0 [ 369.989601][T24883] vfat filesystem being mounted at /416/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 370.011940][T24887] xt_hashlimit: max too large, truncated to 1048576 [ 370.048633][T24889] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (43368!=20869) [ 370.102636][T24889] JBD2: no valid journal superblock found [ 370.108543][T24889] EXT4-fs (loop5): Could not load journal inode [ 370.183377][T24896] EXT4-fs: inline encryption not supported [ 370.215208][T24896] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.6922: invalid block [ 370.238222][T24896] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6922: invalid indirect mapped block 4294967295 (level 1) [ 370.253935][T24896] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6922: invalid indirect mapped block 4294967295 (level 1) [ 370.272420][T24896] EXT4-fs (loop4): 2 truncates cleaned up [ 370.394691][T24893] lo speed is unknown, defaulting to 1000 [ 370.450124][T24915] set_capacity_and_notify: 4 callbacks suppressed [ 370.450204][T24915] loop4: detected capacity change from 0 to 512 [ 370.504645][T24915] EXT4-fs: Ignoring removed oldalloc option [ 370.510897][T24915] ext4: Unknown parameter 'audit' [ 370.538636][T24923] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 370.558021][T24922] ip6gretap0: entered promiscuous mode [ 370.565120][T24915] loop4: detected capacity change from 0 to 512 [ 370.565187][T24922] macsec1: entered promiscuous mode [ 370.578299][T24922] ip6gretap0: left promiscuous mode [ 370.588499][T24924] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 370.622877][T24915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6929: bg 0: block 248: padding at end of block bitmap is not set [ 370.663861][T24915] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6929: Failed to acquire dquot type 1 [ 370.679424][T24915] EXT4-fs (loop4): 1 truncate cleaned up [ 370.686297][T24915] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.732968][T24936] netlink: 'syz.3.6936': attribute type 10 has an invalid length. [ 370.741747][ T851] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 370.844100][T24949] loop4: detected capacity change from 0 to 2048 [ 370.859871][T24951] siw: device registration error -23 [ 370.881283][T24949] netlink: 'syz.4.6939': attribute type 49 has an invalid length. [ 371.051970][T24982] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 371.239767][T24992] loop5: detected capacity change from 0 to 8192 [ 371.298223][T24992] vfat filesystem being mounted at /83/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 371.368468][T25002] dummy0: entered allmulticast mode [ 371.392245][T25002] loop4: detected capacity change from 0 to 512 [ 371.413888][T25002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 371.423907][T25002] EXT4-fs (loop4): inodes count not valid: 0 vs 32 [ 371.515186][T25010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=25010 comm=syz.2.6964 [ 371.558729][T25012] loop4: detected capacity change from 0 to 1024 [ 371.593756][T25012] /dev/loop4: Can't open blockdev [ 371.805061][T25038] macvtap2: entered promiscuous mode [ 371.810458][T25038] macvtap2: entered allmulticast mode [ 371.844038][T25038] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 371.894732][T25046] loop5: detected capacity change from 0 to 1024 [ 371.902691][T25046] EXT4-fs: Ignoring removed orlov option [ 371.940794][T25046] EXT4-fs mount: 40 callbacks suppressed [ 371.940809][T25046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.106130][T25065] loop4: detected capacity change from 0 to 1024 [ 372.124291][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.126128][T25070] SELinux: failed to load policy [ 372.154672][T25065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 372.174793][T25052] lo speed is unknown, defaulting to 1000 [ 372.185956][T25065] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.202518][T25065] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6990: bg 0: block 112: padding at end of block bitmap is not set [ 372.234344][T25065] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 117 [ 372.246846][T25065] EXT4-fs (loop4): This should not happen!! Data will be lost [ 372.246846][T25065] [ 372.282597][T25080] loop5: detected capacity change from 0 to 512 [ 372.316336][T25080] EXT4-fs: inline encryption not supported [ 372.344552][T25080] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6996: invalid indirect mapped block 4294967295 (level 1) [ 372.344522][T17387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 372.368151][T25080] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6996: invalid indirect mapped block 4294967295 (level 1) [ 372.390763][T25087] geneve2: entered promiscuous mode [ 372.402122][T25080] EXT4-fs (loop5): 2 truncates cleaned up [ 372.422397][T25080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.440168][T25097] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 372.489698][T25104] random: crng reseeded on system resumption [ 372.591414][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.601459][T25104] __nla_validate_parse: 8 callbacks suppressed [ 372.601473][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7003'. [ 372.677671][T19316] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 56825 - 0 [ 372.688011][T19316] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 56825 - 0 [ 372.697149][T19316] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 56825 - 0 [ 372.726695][T19316] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 56825 - 0 [ 372.870637][T25116] siw: device registration error -23 [ 372.939322][T25111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=25111 comm=syz.5.7006 [ 373.108074][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7013'. [ 373.380781][T25147] loop6: detected capacity change from 0 to 1024 [ 373.392491][T25148] vfat filesystem being mounted at /93/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 373.409281][T25147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.436656][T25148] bio_check_eod: 102 callbacks suppressed [ 373.436672][T25148] syz.5.7020: attempt to access beyond end of device [ 373.436672][T25148] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 373.471205][T25148] syz.5.7020: attempt to access beyond end of device [ 373.471205][T25148] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 373.499841][T25148] syz.5.7020: attempt to access beyond end of device [ 373.499841][T25148] loop5: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 373.514510][T21805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.514703][T25148] syz.5.7020: attempt to access beyond end of device [ 373.514703][T25148] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 373.538163][T25148] syz.5.7020: attempt to access beyond end of device [ 373.538163][T25148] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 373.552943][T25148] syz.5.7020: attempt to access beyond end of device [ 373.552943][T25148] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 373.567159][T25148] syz.5.7020: attempt to access beyond end of device [ 373.567159][T25148] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 373.610160][T25148] syz.5.7020: attempt to access beyond end of device [ 373.610160][T25148] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 373.633337][T25148] syz.5.7020: attempt to access beyond end of device [ 373.633337][T25148] loop5: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 373.654413][T25172] syz.5.7020: attempt to access beyond end of device [ 373.654413][T25172] loop5: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 373.692282][T25163] vfat filesystem being mounted at /199/bus supports timestamps until 2107-12-31 (0x10391447e) [ 373.705611][T25163] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 373.714207][T25163] FAT-fs (loop6): Filesystem has been set read-only [ 373.753577][T25163] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 373.772357][T25181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7033'. [ 373.781371][T25181] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7033'. [ 373.781701][T25175] lo speed is unknown, defaulting to 1000 [ 373.790591][T25145] buffer_io_error: 24 callbacks suppressed [ 373.790604][T25145] Buffer I/O error on dev loop5, logical block 305, async page read [ 373.810202][T25145] Buffer I/O error on dev loop5, logical block 306, async page read [ 373.818423][T25145] Buffer I/O error on dev loop5, logical block 307, async page read [ 373.826522][T25145] Buffer I/O error on dev loop5, logical block 308, async page read [ 373.835979][T25145] Buffer I/O error on dev loop5, logical block 309, async page read [ 373.852826][T25145] Buffer I/O error on dev loop5, logical block 310, async page read [ 373.860970][T25145] Buffer I/O error on dev loop5, logical block 311, async page read [ 373.895165][T25185] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7035'. [ 373.897714][T25145] Buffer I/O error on dev loop5, logical block 312, async page read [ 373.915075][T25148] Buffer I/O error on dev loop5, logical block 305, async page read [ 373.917943][T25185] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 373.925404][T25148] Buffer I/O error on dev loop5, logical block 306, async page read [ 373.936488][T25185] batman_adv: batadv0: Adding interface: ip6gretap1 [ 373.948409][T25185] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.975401][T25185] batman_adv: batadv0: Interface activated: ip6gretap1 [ 373.991127][ T29] kauditd_printk_skb: 780 callbacks suppressed [ 373.991141][ T29] audit: type=1400 audit(4147485420.134:20329): avc: denied { ioctl } for pid=25186 comm="syz.3.7036" path="socket:[88330]" dev="sockfs" ino=88330 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.232777][T25206] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 374.240249][T25206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7044'. [ 374.285252][ T29] audit: type=1326 audit(4147485420.434:20330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.309017][ T29] audit: type=1326 audit(4147485420.434:20331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.333339][ T29] audit: type=1326 audit(4147485420.434:20332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.357009][ T29] audit: type=1326 audit(4147485420.434:20333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.383835][ T29] audit: type=1326 audit(4147485420.534:20334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.408127][ T29] audit: type=1326 audit(4147485420.534:20335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.431772][ T29] audit: type=1326 audit(4147485420.534:20336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.456071][ T29] audit: type=1326 audit(4147485420.534:20337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.480012][ T29] audit: type=1326 audit(4147485420.534:20338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25207 comm="syz.3.7046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 374.564662][T25220] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7049'. [ 374.671607][T25228] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.822597][T25236] lo: entered allmulticast mode [ 374.831223][T25236] ext4: Unknown parameter 'nouser_xattr' [ 374.993507][T25242] netlink: 'syz.6.7056': attribute type 1 has an invalid length. [ 375.071070][T25242] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.105977][T25242] bond6: (slave bond7): making interface the new active one [ 375.113773][T25242] bond6: (slave bond7): Enslaving as an active interface with an up link [ 375.132799][T25250] EXT4-fs (loop4): 1 truncate cleaned up [ 375.140252][T25250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.172868][T25250] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.7059: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 375.233673][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7063'. [ 375.258965][T25259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.268876][T17387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.273642][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7063'. [ 375.286739][T25259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7063'. [ 375.312497][T25259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.321393][T25262] tipc: Failed to remove unknown binding: 66,0,0/0:2856482348/2856482349 [ 375.321657][T25259] bond8: (slave bond0): Enslaving as an active interface with a down link [ 375.351029][T25265] xt_hashlimit: Unknown mode mask 40000, kernel too old? [ 375.377130][T25262] tipc: Failed to remove unknown binding: 66,0,0/0:2856482348/2856482349 [ 375.387937][T25259] netlink: 'syz.6.7063': attribute type 10 has an invalid length. [ 375.424011][T25265] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 375.605809][T25265] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.631269][T17387] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.662125][T25273] set_capacity_and_notify: 5 callbacks suppressed [ 375.662145][T25273] loop4: detected capacity change from 0 to 256 [ 375.679987][T25273] vfat filesystem being mounted at /447/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 375.738040][T25273] syzkaller1: entered promiscuous mode [ 375.743667][T25273] syzkaller1: entered allmulticast mode [ 375.774822][T25279] ip6t_srh: unknown srh match flags 4000 [ 375.877930][T25277] cgroup: fork rejected by pids controller in /syz6 [ 375.924172][T25319] FAULT_INJECTION: forcing a failure. [ 375.924172][T25319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.937317][T25319] CPU: 0 UID: 0 PID: 25319 Comm: syz.4.7073 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 375.937350][T25319] Tainted: [W]=WARN [ 375.937380][T25319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.937391][T25319] Call Trace: [ 375.937398][T25319] [ 375.937407][T25319] __dump_stack+0x1d/0x30 [ 375.937430][T25319] dump_stack_lvl+0x95/0xd0 [ 375.937512][T25319] dump_stack+0x15/0x1b [ 375.937531][T25319] should_fail_ex+0x263/0x280 [ 375.937587][T25319] should_fail+0xb/0x20 [ 375.937677][T25319] should_fail_usercopy+0x1a/0x20 [ 375.937698][T25319] _copy_to_user+0x20/0xa0 [ 375.937722][T25319] simple_read_from_buffer+0xb5/0x130 [ 375.937797][T25319] proc_fail_nth_read+0x10e/0x150 [ 375.937819][T25319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.937863][T25319] vfs_read+0x1ab/0x7f0 [ 375.937897][T25319] ? __rcu_read_unlock+0x4e/0x70 [ 375.937916][T25319] ? __fget_files+0x184/0x1c0 [ 375.937940][T25319] ? mutex_lock+0x57/0x90 [ 375.938035][T25319] ksys_read+0xdc/0x1a0 [ 375.938052][T25319] __x64_sys_read+0x40/0x50 [ 375.938071][T25319] x64_sys_call+0x2889/0x3000 [ 375.938095][T25319] do_syscall_64+0xc0/0x2a0 [ 375.938193][T25319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.938213][T25319] RIP: 0033:0x7f2d72f7b58e [ 375.938248][T25319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.938307][T25319] RSP: 002b:00007f2d71a16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.938327][T25319] RAX: ffffffffffffffda RBX: 00007f2d71a176c0 RCX: 00007f2d72f7b58e [ 375.938340][T25319] RDX: 000000000000000f RSI: 00007f2d71a170a0 RDI: 0000000000000007 [ 375.938350][T25319] RBP: 00007f2d71a17090 R08: 0000000000000000 R09: 0000000000000000 [ 375.938361][T25319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.938372][T25319] R13: 00007f2d73236038 R14: 00007f2d73235fa0 R15: 00007ffe24b7df98 [ 375.938445][T25319] [ 376.233938][T25329] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 376.278245][T18928] bond0: (slave bond_slave_0): interface is now down [ 376.285010][T18928] bond0: (slave bond_slave_1): interface is now down [ 376.327680][T25346] bond2: entered promiscuous mode [ 376.332731][T25346] bond2: entered allmulticast mode [ 376.338136][T25346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.355893][T25349] loop4: detected capacity change from 0 to 128 [ 376.397939][T25349] vfat: Unknown parameter 'ÿ00000035184372093952' [ 376.423464][ T7355] bond0: (slave bond_slave_0): interface is now down [ 376.430253][ T7355] bond0: (slave bond_slave_1): interface is now down [ 376.455342][ T7355] bond0: now running without any active interface! [ 376.594643][T25369] gretap1: entered promiscuous mode [ 376.599901][T25369] gretap1: entered allmulticast mode [ 376.608646][T25371] netlink: 'syz.4.7083': attribute type 22 has an invalid length. [ 376.803142][T25388] loop4: detected capacity change from 0 to 1024 [ 376.820711][T25388] EXT4-fs: Ignoring removed orlov option [ 376.857649][T25388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.910644][T17387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.192612][T25424] loop4: detected capacity change from 0 to 512 [ 377.226874][T25424] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 377.241399][T25424] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 377.250509][T25424] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 377.384891][T25437] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 377.424240][T25437] SELinux: failed to load policy [ 377.499986][T25467] loop6: detected capacity change from 0 to 256 [ 377.515997][T25461] loop5: detected capacity change from 0 to 2048 [ 377.535745][T25467] vfat filesystem being mounted at /217/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 377.554460][T25461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.576306][T25472] loop4: detected capacity change from 0 to 512 [ 377.586782][T25467] syzkaller1: entered promiscuous mode [ 377.592255][T25467] syzkaller1: entered allmulticast mode [ 377.614099][T25467] netlink: 'syz.6.7118': attribute type 13 has an invalid length. [ 377.621905][T25467] netlink: 'syz.6.7118': attribute type 12 has an invalid length. [ 377.659105][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.673889][T25472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.680607][T25472] ext4: Unknown parameter 'uid>00000000000000003327' [ 377.739076][T25478] loop6: detected capacity change from 0 to 512 [ 377.755465][T25481] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 377.766822][T25478] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.804783][T25478] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 377.812914][T25478] System zones: 0-2, 18-18, 34-35 [ 377.824890][T25492] netlink: 'syz.4.7127': attribute type 10 has an invalid length. [ 377.833843][T25478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 377.835509][T25492] loop4: detected capacity change from 0 to 512 [ 377.852268][T25492] EXT4-fs: test_dummy_encryption option not supported [ 377.869289][T25478] EXT4-fs warning (device loop6): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 377.924725][T21805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.002412][T25498] ip6t_srh: unknown srh match flags 4000 [ 378.033127][T25498] __nla_validate_parse: 7 callbacks suppressed [ 378.033139][T25498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7129'. [ 378.083368][T25504] loop4: detected capacity change from 0 to 512 [ 378.107617][T25504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.148571][T25507] ext4: Unknown parameter 'func' [ 378.161965][T25504] EXT4-fs (loop4): too many log groups per flexible block group [ 378.195880][T25504] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 378.239517][T25504] EXT4-fs (loop4): mount failed [ 378.246173][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7136'. [ 378.286581][T25504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7133'. [ 378.307898][T25504] siw: device registration error -23 [ 378.446871][T25536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7144'. [ 378.481879][T25536] vlan3: entered promiscuous mode [ 378.515195][T25539] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7145'. [ 378.553700][T25541] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 378.576118][T25544] bond7: Removing last ns target with arp_interval on [ 378.628764][T25548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7149'. [ 378.667981][T25548] macvtap3: entered promiscuous mode [ 378.673515][T25548] macvtap3: entered allmulticast mode [ 378.679907][T25548] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 378.798030][T25564] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7155'. [ 378.893930][T25566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7156'. [ 378.988124][T25566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7156'. [ 379.248996][T25585] SELinux: failed to load policy [ 379.278069][T25587] EXT4-fs: Ignoring removed orlov option [ 379.301342][T25587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.367585][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 379.367597][ T29] audit: type=1326 audit(4147485425.514:20753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 379.406664][T25603] ip6t_srh: unknown srh match flags 4000 [ 379.412489][ T29] audit: type=1326 audit(4147485425.554:20754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 379.437804][T25603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7166'. [ 379.450794][ T29] audit: type=1326 audit(4147485425.554:20755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 379.474998][ T29] audit: type=1326 audit(4147485425.554:20756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 379.498795][ T29] audit: type=1326 audit(4147485425.554:20757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 379.522757][ T29] audit: type=1326 audit(4147485425.554:20758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6771d4b58e code=0x7ffc0000 [ 379.547040][ T29] audit: type=1326 audit(4147485425.554:20759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6771d4b58e code=0x7ffc0000 [ 379.570678][ T29] audit: type=1326 audit(4147485425.554:20760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 379.594668][ T29] audit: type=1326 audit(4147485425.554:20761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 379.618278][ T29] audit: type=1326 audit(4147485425.554:20762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.3.7165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f6771d8acb9 code=0x7ffc0000 [ 379.646830][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.681327][T25606] SET target dimension over the limit! [ 379.720787][ T3504] kernel write not supported for file [eventfd] (pid: 3504 comm: kworker/0:9) [ 379.760923][T25614] SELinux: failed to load policy [ 379.770535][T25617] FAT-fs (loop5): Directory bread(block 1285) failed [ 379.783499][T25617] FAT-fs (loop5): Directory bread(block 1286) failed [ 379.799809][T25617] FAT-fs (loop5): Directory bread(block 1287) failed [ 379.814712][T25617] FAT-fs (loop5): Directory bread(block 1288) failed [ 379.828239][T25617] vfat filesystem being mounted at /112/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 379.854967][T25630] netlink: 'syz.3.7176': attribute type 4 has an invalid length. [ 379.865308][T25617] netlink: 'syz.5.7172': attribute type 1 has an invalid length. [ 379.874315][T25624] netlink: 'syz.4.7174': attribute type 4 has an invalid length. [ 379.901547][T25623] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 379.911752][T25623] bond4 (unregistering): Released all slaves [ 379.916630][T25638] FAT-fs (loop5): Directory bread(block 1285) failed [ 379.925885][T25638] FAT-fs (loop5): Directory bread(block 1286) failed [ 379.932926][T25638] FAT-fs (loop5): Directory bread(block 1287) failed [ 379.939879][T25638] FAT-fs (loop5): Directory bread(block 1288) failed [ 379.947148][T25617] bond3: entered promiscuous mode [ 379.951626][T25638] FAT-fs (loop5): Directory bread(block 1285) failed [ 379.953836][T25617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.965513][T25638] FAT-fs (loop5): Directory bread(block 1286) failed [ 379.982941][T25638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 379.996575][T25638] bond3: (slave bond4): making interface the new active one [ 380.004080][T25638] bond4: entered promiscuous mode [ 380.010323][T25638] bond3: (slave bond4): Enslaving as an active interface with an up link [ 380.245361][T25667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.270843][T25681] netlink: 'syz.2.7194': attribute type 21 has an invalid length. [ 380.290940][T25674] gretap1: entered promiscuous mode [ 380.296218][T25674] gretap1: entered allmulticast mode [ 380.362641][T17387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.373683][T25693] vfat filesystem being mounted at /229/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 380.412423][T25693] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 380.421619][T25693] FAT-fs (loop6): Filesystem has been set read-only [ 380.429187][T25693] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 380.430077][T25699] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 380.449904][T25696] EXT4-fs: Ignoring removed bh option [ 380.493345][T25696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.496461][T25707] netlink: 'syz.4.7198': attribute type 4 has an invalid length. [ 380.520809][T25705] syzkaller1: entered promiscuous mode [ 380.526405][T25705] syzkaller1: entered allmulticast mode [ 380.526853][T25696] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 380.573253][T25696] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 380.585657][T25696] EXT4-fs (loop5): This should not happen!! Data will be lost [ 380.585657][T25696] [ 380.595313][T25696] EXT4-fs (loop5): Total free blocks count 0 [ 380.601288][T25696] EXT4-fs (loop5): Free/Dirty block details [ 380.607314][T25696] EXT4-fs (loop5): free_blocks=2415919104 [ 380.613037][T25696] EXT4-fs (loop5): dirty_blocks=48 [ 380.618181][T25696] EXT4-fs (loop5): Block reservation details [ 380.624195][T25696] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 380.649258][T25712] gretap1: entered promiscuous mode [ 380.654686][T25712] gretap1: entered allmulticast mode [ 380.711058][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.776198][T25731] macsec1: entered allmulticast mode [ 380.781519][T25731] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 380.797385][T25731] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 380.825828][T25729] bond2: entered promiscuous mode [ 380.831023][T25729] bond2: entered allmulticast mode [ 380.836850][T25729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.999019][T25769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.018180][T25773] geneve2: entered promiscuous mode [ 381.023433][T25773] geneve2: entered allmulticast mode [ 381.041881][T25772] bond1: (slave bond0): Releasing active interface [ 381.072246][T25772] batman_adv: batadv0: Removing interface: dummy0 [ 381.091805][T25772] bond0: (slave bond_slave_0): Releasing backup interface [ 381.110993][T25772] bond0: (slave bond_slave_1): Releasing backup interface [ 381.125381][T25772] team0: Port device team_slave_0 removed [ 381.137092][T25772] team0: Port device team_slave_1 removed [ 381.155641][T25794] netlink: 'syz.3.7240': attribute type 1 has an invalid length. [ 381.160805][T25772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.176757][T25772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.197632][T25772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.214582][T19309] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.218314][T25798] SELinux: ebitmap: truncated map [ 381.233566][T25798] SELinux: failed to load policy [ 381.244667][T25799] bond8 (unregistering): Released all slaves [ 381.276270][T19309] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.300516][T19309] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.331035][T19309] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.367863][T25815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.377520][T25819] netlink: 'syz.6.7250': attribute type 10 has an invalid length. [ 381.378850][T25815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.395173][T25815] bond4: (slave bond0): Enslaving as an active interface with a down link [ 381.429956][T25822] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 381.459190][T25824] set_capacity_and_notify: 6 callbacks suppressed [ 381.459205][T25824] loop6: detected capacity change from 0 to 128 [ 381.474093][T25815] netlink: 'syz.4.7248': attribute type 10 has an invalid length. [ 381.530108][T25824] vfat filesystem being mounted at /240/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 381.658537][T25833] bio_check_eod: 19104 callbacks suppressed [ 381.658565][T25833] syz.6.7252: attempt to access beyond end of device [ 381.658565][T25833] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 381.704941][T25836] loop4: detected capacity change from 0 to 512 [ 381.719388][T25836] EXT4-fs (loop4): Unsupported encryption level 255 [ 381.750899][T25833] syz.6.7252: attempt to access beyond end of device [ 381.750899][T25833] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 381.810780][T25833] syz.6.7252: attempt to access beyond end of device [ 381.810780][T25833] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 381.859110][T25833] syz.6.7252: attempt to access beyond end of device [ 381.859110][T25833] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 381.906312][T25833] syz.6.7252: attempt to access beyond end of device [ 381.906312][T25833] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 382.049889][T25833] syz.6.7252: attempt to access beyond end of device [ 382.049889][T25833] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 382.088740][T25833] syz.6.7252: attempt to access beyond end of device [ 382.088740][T25833] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 382.114326][T25836] loop4: detected capacity change from 0 to 512 [ 382.141281][T25836] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 382.147426][T25853] team0: entered promiscuous mode [ 382.154288][T25833] syz.6.7252: attempt to access beyond end of device [ 382.154288][T25833] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 382.154331][T25833] syz.6.7252: attempt to access beyond end of device [ 382.154331][T25833] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 382.167689][T25853] team_slave_0: entered promiscuous mode [ 382.167777][T25853] team_slave_1: entered promiscuous mode [ 382.185130][T25836] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 382.191717][T25833] syz.6.7252: attempt to access beyond end of device [ 382.191717][T25833] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 382.193770][T25836] EXT4-fs (loop4): 1 truncate cleaned up [ 382.215772][T25853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.223973][T25836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.240109][T25836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.253145][T25853] team0: left promiscuous mode [ 382.258119][T25853] team_slave_0: left promiscuous mode [ 382.263655][T25853] team_slave_1: left promiscuous mode [ 382.313717][T25861] netlink: 'syz.2.7268': attribute type 13 has an invalid length. [ 382.326208][T25832] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 382.338378][T25861] gretap0: refused to change device tx_queue_len [ 382.345947][T25861] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 382.412525][T25866] loop5: detected capacity change from 0 to 1024 [ 382.421453][T25866] EXT4-fs: Ignoring removed bh option [ 382.426947][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 382.507920][T25866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.569622][T25885] loop6: detected capacity change from 0 to 256 [ 382.570705][T25885] vfat filesystem being mounted at /242/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 382.687012][T25902] syzkaller1: entered promiscuous mode [ 382.687031][T25902] syzkaller1: entered allmulticast mode [ 382.688726][T25902] netlink: 'syz.6.7276': attribute type 13 has an invalid length. [ 382.706895][T25902] netlink: 'syz.6.7276': attribute type 12 has an invalid length. [ 382.710032][T25904] loop4: detected capacity change from 0 to 1024 [ 382.732222][T25904] EXT4-fs: Ignoring removed orlov option [ 382.744924][T25904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.771124][T17387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.955455][T25935] loop4: detected capacity change from 0 to 128 [ 382.956962][T25935] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 382.963492][T25935] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.964908][T25935] netlink: 'syz.4.7294': attribute type 39 has an invalid length. [ 382.976503][T25933] hub 6-0:1.0: USB hub found [ 383.010873][T17387] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.023592][T25933] hub 6-0:1.0: 8 ports detected [ 383.030281][T25937] netlink: 'syz.6.7293': attribute type 13 has an invalid length. [ 383.035855][T25937] gretap0: refused to change device tx_queue_len [ 383.036455][T25937] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 383.118150][T25931] lo speed is unknown, defaulting to 1000 [ 383.125728][T25939] gretap0: refused to change device tx_queue_len [ 383.126276][T25939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 383.128373][T25946] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 383.130118][T25946] x_tables: duplicate underflow at hook 3 [ 383.162014][T25947] loop4: detected capacity change from 0 to 512 [ 383.233891][T25951] loop6: detected capacity change from 0 to 2048 [ 383.248063][T25951] __nla_validate_parse: 22 callbacks suppressed [ 383.248077][T25951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7298'. [ 383.318703][T25947] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 383.423378][T25947] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.7297: iget: bad i_size value: 12154757448730 [ 383.451303][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.453704][T25957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7300'. [ 383.469338][T25957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7300'. [ 383.486926][T25947] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7297: couldn't read orphan inode 13 (err -117) [ 383.504665][T25947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.628620][T17387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.797472][T25985] loop6: detected capacity change from 0 to 512 [ 383.813773][T25987] xt_hashlimit: max too large, truncated to 1048576 [ 383.828382][T25985] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 383.874023][T25991] serio: Serial port ptm0 [ 383.892311][T25985] vfat filesystem being mounted at /249/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 383.935334][T25998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7314'. [ 384.011863][T26004] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 384.080666][T26004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7316'. [ 384.093658][T26013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7317'. [ 384.209511][T26018] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7319: bg 0: block 248: padding at end of block bitmap is not set [ 384.334741][T26028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.354395][T26018] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7319: Failed to acquire dquot type 1 [ 384.396902][T26018] EXT4-fs (loop5): 1 truncate cleaned up [ 384.414722][T26018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.447975][T26018] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.503049][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.514207][T19309] __quota_error: 602 callbacks suppressed [ 384.514221][T19309] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 384.529151][T19309] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 1 [ 384.534396][ T29] audit: type=1326 audit(4147485686.687:21363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a9dacb9 code=0x7ffc0000 [ 384.572154][ T29] audit: type=1326 audit(4147485686.717:21364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a9dacb9 code=0x7ffc0000 [ 384.596406][ T29] audit: type=1326 audit(4147485686.717:21365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a9dacb9 code=0x7ffc0000 [ 384.620016][ T29] audit: type=1326 audit(4147485686.717:21366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a9dacb9 code=0x7ffc0000 [ 384.643727][ T29] audit: type=1326 audit(4147485686.717:21367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f6e5a9dacb9 code=0x7ffc0000 [ 384.668259][ T29] audit: type=1326 audit(4147485686.717:21368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a9dacb9 code=0x7ffc0000 [ 384.692576][ T29] audit: type=1326 audit(4147485686.717:21369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a9dacb9 code=0x7ffc0000 [ 384.717021][ T29] audit: type=1326 audit(4147485686.717:21370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a9dacb9 code=0x7ffc0000 [ 384.740624][ T29] audit: type=1326 audit(4147485686.717:21371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26036 comm="syz.2.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a99b58e code=0x7ffc0000 [ 384.770425][T21805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.959592][T26058] ip6t_srh: unknown srh match flags 4000 [ 384.966857][T26058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7337'. [ 384.977535][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7334'. [ 385.012004][T26062] vfat filesystem being mounted at /501/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 385.160767][T26085] serio: Serial port ptm0 [ 385.216286][T26089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7350'. [ 385.450165][T26087] Set syz1 is full, maxelem 65536 reached [ 385.485337][T26066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.554574][T26099] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 385.587405][T26099] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7353: bg 0: block 255: padding at end of block bitmap is not set [ 385.617915][T21805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.638023][T26099] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 385.653867][T26099] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7353: invalid indirect mapped block 1 (level 1) [ 385.668341][T26099] EXT4-fs (loop5): 1 truncate cleaned up [ 385.674716][T26099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.687090][T26104] validate_nla: 5 callbacks suppressed [ 385.687103][T26104] netlink: 'syz.2.7356': attribute type 16 has an invalid length. [ 385.700448][T26104] netlink: 'syz.2.7356': attribute type 17 has an invalid length. [ 385.708287][T26104] netlink: 'syz.2.7356': attribute type 27 has an invalid length. [ 385.716921][T26099] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 385.784112][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.832351][T26114] netlink: 'syz.6.7360': attribute type 14 has an invalid length. [ 385.840269][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7360'. [ 385.861833][T19315] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.861863][T26114] netlink: 'syz.6.7360': attribute type 14 has an invalid length. [ 385.861912][T19315] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.882710][T26117] netlink: 'syz.6.7360': attribute type 13 has an invalid length. [ 387.554966][T26117] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 387.618226][T19315] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.656808][T19315] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.681132][T19315] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.690134][T19315] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.732079][T26145] set_capacity_and_notify: 5 callbacks suppressed [ 387.732093][T26145] loop5: detected capacity change from 0 to 1024 [ 387.734806][T19315] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.753786][T19315] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.816819][T26145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 387.843329][T26145] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.862299][T26158] loop6: detected capacity change from 0 to 1024 [ 387.888115][T26159] netlink: 'syz.2.7373': attribute type 13 has an invalid length. [ 387.896080][T26159] netlink: 'syz.2.7373': attribute type 12 has an invalid length. [ 387.918838][T26145] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7370: bg 0: block 112: padding at end of block bitmap is not set [ 387.944922][T26158] EXT4-fs: Ignoring removed orlov option [ 387.946603][T26135] lo speed is unknown, defaulting to 1000 [ 387.970633][T26145] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 117 [ 387.983289][T26145] EXT4-fs (loop5): This should not happen!! Data will be lost [ 387.983289][T26145] [ 388.024631][T26158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.229040][T26167] vlan4: entered promiscuous mode [ 388.234452][T26167] batadv0: entered promiscuous mode [ 388.420673][T26182] __nla_validate_parse: 4 callbacks suppressed [ 388.420687][T26182] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7378'. [ 388.436596][T26182] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7378'. [ 388.445559][T26182] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7378'. [ 388.852284][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 388.862809][T26179] netlink: 'syz.4.7378': attribute type 4 has an invalid length. [ 388.871999][T26179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7378'. [ 388.904445][T26190] loop5: detected capacity change from 0 to 1024 [ 388.921765][T26190] EXT4-fs: inline encryption not supported [ 388.958193][T26190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.085265][T26190] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.7379'. [ 389.094448][T26190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7379'. [ 389.110713][T21805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.166830][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.198498][T26207] siw: device registration error -23 [ 389.228984][T26213] loop5: detected capacity change from 0 to 256 [ 389.256464][T26213] vfat filesystem being mounted at /142/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 389.267829][T26209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7387'. [ 389.276828][T26209] netlink: 212 bytes leftover after parsing attributes in process `syz.4.7387'. [ 389.303364][T26209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7387'. [ 389.306695][T26213] syzkaller1: entered promiscuous mode [ 389.317904][T26213] syzkaller1: entered allmulticast mode [ 389.349294][T26213] netlink: 'syz.5.7386': attribute type 13 has an invalid length. [ 389.373792][T26222] loop4: detected capacity change from 0 to 512 [ 389.397485][T26206] lo speed is unknown, defaulting to 1000 [ 389.412136][T26222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.492802][T26222] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.548748][T26235] loop5: detected capacity change from 0 to 1024 [ 389.574701][T26235] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 389.588013][T26222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.603475][T26235] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 389.624315][T26235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.659171][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.669872][T26241] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7398'. [ 389.733997][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 389.734010][ T29] audit: type=1326 audit(4147485691.887:21688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d72fbacb9 code=0x7ffc0000 [ 389.765151][ T29] audit: type=1326 audit(4147485691.887:21689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f2d72fbacb9 code=0x7ffc0000 [ 389.788910][ T29] audit: type=1326 audit(4147485691.887:21690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d72fbacb9 code=0x7ffc0000 [ 389.812770][ T29] audit: type=1326 audit(4147485691.887:21691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d72f7b58e code=0x7ffc0000 [ 389.837304][ T29] audit: type=1326 audit(4147485691.887:21692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d72f7b58e code=0x7ffc0000 [ 389.861194][T26246] loop4: detected capacity change from 0 to 2048 [ 389.868034][ T29] audit: type=1326 audit(4147485691.917:21693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d72fbacb9 code=0x7ffc0000 [ 389.892443][ T29] audit: type=1326 audit(4147485691.917:21694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f2d72fbacb9 code=0x7ffc0000 [ 389.916736][ T29] audit: type=1326 audit(4147485691.917:21695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d72fbacb9 code=0x7ffc0000 [ 389.916829][ T29] audit: type=1326 audit(4147485691.917:21696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2d72fbacb9 code=0x7ffc0000 [ 389.916934][ T29] audit: type=1326 audit(4147485691.917:21697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.4.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d72fbacb9 code=0x7ffc0000 [ 390.026145][T26253] SELinux: failed to load policy [ 390.063621][T26266] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 390.102103][T26266] vlan2: entered promiscuous mode [ 390.102127][T26266] geneve1: entered promiscuous mode [ 390.102218][T26266] vlan2: entered allmulticast mode [ 390.102300][T26266] geneve1: entered allmulticast mode [ 390.168894][T26269] lo speed is unknown, defaulting to 1000 [ 390.318710][T26281] program syz.4.7411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.352512][T26284] ip6t_srh: unknown srh match flags 4000 [ 390.379491][T26287] bond8: option mode: unable to set because the bond device has slaves [ 390.837665][T26313] lo speed is unknown, defaulting to 1000 [ 390.996153][T26319] loop6: detected capacity change from 0 to 512 [ 391.054470][T26319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.075777][T26319] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.194147][T21805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.461938][T26333] loop4: detected capacity change from 0 to 512 [ 391.470369][T26325] loop5: detected capacity change from 0 to 2048 [ 391.498128][T26333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 391.511531][T26331] validate_nla: 5 callbacks suppressed [ 391.511543][T26331] netlink: 'syz.2.7431': attribute type 10 has an invalid length. [ 391.536189][T26333] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.598183][T26325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.631296][T26347] bond0: entered promiscuous mode [ 391.636544][T26347] bond_slave_0: entered promiscuous mode [ 391.642250][T26325] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.642271][T26347] bond_slave_1: entered promiscuous mode [ 391.642329][T26347] bridge0: entered promiscuous mode [ 391.682369][T26325] netlink: 'syz.5.7428': attribute type 10 has an invalid length. [ 391.715919][T17387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 391.734169][T26354] netlink: 'syz.2.7437': attribute type 1 has an invalid length. [ 391.743034][T26347] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.752217][T26347] bond0: left promiscuous mode [ 391.757089][T26347] bond_slave_0: left promiscuous mode [ 391.762641][T26347] bond_slave_1: left promiscuous mode [ 391.768175][T26347] bridge0: left promiscuous mode [ 391.783810][T26325] bridge0: port 3(veth0_to_bridge) entered blocking state [ 391.790963][T26325] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 391.798365][T26325] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.805415][T26325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.812667][T26325] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.819774][T26325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.828023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.840132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.852192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.864238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.876264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.888338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.900381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.912445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.924481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.936589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.981700][T26325] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 392.006882][T26354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.378619][T19310] bond0: (slave bridge0): interface is now down [ 392.666347][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.674223][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.007806][ T1628] bond0: (slave bridge0): interface is now down [ 393.159665][ T1628] bond0: (slave bridge0): interface is now down [ 393.351170][ T1628] bond0: (slave bridge0): interface is now down [ 393.567269][ T1628] bond0: (slave bridge0): interface is now down [ 393.742820][T19315] bond0: (slave bridge0): interface is now down [ 393.934493][ T7401] bond0: (slave bridge0): interface is now down [ 394.077168][T19308] bond0: (slave bridge0): interface is now down [ 394.228106][T19315] bond0: (slave bridge0): interface is now down [ 394.418097][T19315] bond0: (slave bridge0): interface is now down [ 394.620139][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.760178][T19310] bond0: (slave bridge0): interface is now down [ 394.931876][T19310] bond0: now running without any active interface! [ 396.833202][ C1] net_ratelimit: 65882 callbacks suppressed [ 396.833221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.833293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.839336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.851132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.863085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.874956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.886994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.898961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.910845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.923715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.706117][T26360] bond3: (slave veth9): Enslaving as an active interface with a down link [ 401.448306][T26377] loop6: detected capacity change from 0 to 1024 [ 401.528061][T26377] EXT4-fs: Ignoring removed orlov option [ 401.843310][ C0] net_ratelimit: 70375 callbacks suppressed [ 401.843329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.843350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.849349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.861328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.873109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.885161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.897021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.908925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.920796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.932722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 402.885437][T26377] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 402.885468][T26377] EXT4-fs: failed to create workqueue [ 402.910127][T26377] EXT4-fs (loop6): mount failed [ 405.450413][T26361] kthread_run failed with err -4 [ 406.853236][ C0] net_ratelimit: 70940 callbacks suppressed [ 406.853253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.853314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.859270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.871367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.883195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.895060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.906928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.918972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.930965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.942847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.863242][ C1] net_ratelimit: 74753 callbacks suppressed [ 411.863249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.863259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.869256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.881305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.893256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.905116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.917001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.929064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.940935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.952888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 413.247306][T26362] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 413.350056][T26362] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 416.873263][ C0] net_ratelimit: 72303 callbacks suppressed [ 416.873282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.873343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.879365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.891285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 416.903127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.915160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.927167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.939037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.950925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.962955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 418.275851][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.883340][ C1] net_ratelimit: 60232 callbacks suppressed [ 421.883357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.883574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.889779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.901239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.913330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 421.925232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.937118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.948983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.961018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.972989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.893206][ C0] net_ratelimit: 68648 callbacks suppressed [ 426.893225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.893282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.899312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.911210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.923072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.935144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.947007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.958909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.970679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.983145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.903263][ C0] net_ratelimit: 69466 callbacks suppressed [ 431.903292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.903297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.903441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.909367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.921196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.933539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.945111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.956972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 431.968752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.981074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.913272][ C0] net_ratelimit: 62355 callbacks suppressed [ 436.913287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.913358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.919281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.931365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.943202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.955448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.966853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.978935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 436.990856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 437.002743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.923208][ C0] net_ratelimit: 69678 callbacks suppressed [ 441.923226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.923270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.929205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.941283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.953267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.965160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.976935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.989052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.000851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 442.013171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 445.730455][T26413] netlink: 'syz.6.7449': attribute type 13 has an invalid length. [ 446.933245][ C0] net_ratelimit: 60992 callbacks suppressed [ 446.933264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.933265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.933797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.939338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.951277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 446.963032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.975090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.987018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.998970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 447.010776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.943236][ C1] net_ratelimit: 65800 callbacks suppressed [ 451.943254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.943322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.949339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.961140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.973534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.985074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.996957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 452.008798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 452.020886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 452.032812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.953204][ C0] net_ratelimit: 70157 callbacks suppressed [ 456.953214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.953222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.959309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.971093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.983131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.995029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 457.007184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 457.018661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 457.030723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 457.042647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.963226][ C1] net_ratelimit: 64240 callbacks suppressed [ 461.963244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.963319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.969325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.981123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.993173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.005014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 462.017220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 462.028700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 462.040806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 462.052716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 466.973251][ C0] net_ratelimit: 73829 callbacks suppressed [ 466.973271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 466.973477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 466.979276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 466.991332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 467.003298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 467.015155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 467.026999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 467.039065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 467.051059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 467.062920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 471.983246][ C0] net_ratelimit: 67099 callbacks suppressed [ 471.983262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 471.983651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 471.989334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.001228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 472.013093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.025141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.037116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.048935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.060832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.072908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 476.993222][ C0] net_ratelimit: 73455 callbacks suppressed [ 476.993257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 476.993380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 476.999247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.011299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 477.023259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.035117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.047004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.059039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.070999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.082903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.003253][ C0] net_ratelimit: 74788 callbacks suppressed [ 482.003271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.003432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.009333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.021248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.033117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.045199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 482.057039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.068898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.080800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.092836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.013235][ C1] net_ratelimit: 61286 callbacks suppressed [ 487.013239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.013251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 487.013385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.019321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.031129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.043152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.055136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.067091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.078864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.090854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.023266][ C0] net_ratelimit: 70787 callbacks suppressed [ 492.023288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.023462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 492.029351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.041551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.053104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.065126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.077084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.088993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 492.100751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.112785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 495.066137][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 497.033301][ C1] net_ratelimit: 70991 callbacks suppressed [ 497.033320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.035097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.039392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.051277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.063378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.075218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.087094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.098910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.111234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 497.122772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.043231][ C1] net_ratelimit: 63571 callbacks suppressed [ 502.043247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.043310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.049288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.061183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.073321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 502.085427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.097292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.109218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.121249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.134022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 504.158743][T26342] syz_tun (unregistering): left allmulticast mode [ 507.053224][ C0] net_ratelimit: 64247 callbacks suppressed [ 507.053243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.053350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 507.059223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.071586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.083244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.095096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 507.106997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.119060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 507.130894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.142779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 512.063220][ C0] net_ratelimit: 69351 callbacks suppressed [ 512.063239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 512.063274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 512.069305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 512.081584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 512.093140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 512.105673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 512.117619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 512.129521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 512.141279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 512.153348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 514.003355][ C0] ================================================================== [ 514.011467][ C0] BUG: KCSAN: data-race in bond_rcv_validate / bond_rcv_validate [ 514.019189][ C0] [ 514.021504][ C0] write to 0xffff888149f0d428 of 8 bytes by interrupt on cpu 1: [ 514.029128][ C0] bond_rcv_validate+0x202/0x7a0 [ 514.034063][ C0] bond_handle_frame+0xde/0x5e0 [ 514.038909][ C0] __netif_receive_skb_core+0x5b1/0x1950 [ 514.044539][ C0] __netif_receive_skb+0x59/0x270 [ 514.049559][ C0] netif_receive_skb+0x4b/0x2d0 [ 514.054420][ C0] br_pass_frame_up+0x23b/0x330 [ 514.059279][ C0] br_handle_frame_finish+0xdb5/0xfc0 [ 514.064658][ C0] br_nf_hook_thresh+0x233/0x270 [ 514.069600][ C0] br_nf_pre_routing_finish_ipv6+0x550/0x580 [ 514.075587][ C0] br_nf_pre_routing_ipv6+0x1fa/0x2e0 [ 514.080962][ C0] br_nf_pre_routing+0x52b/0xbd0 [ 514.085901][ C0] br_handle_frame+0x51e/0xa30 [ 514.090678][ C0] __netif_receive_skb_core+0x5b1/0x1950 [ 514.096306][ C0] __netif_receive_skb+0x59/0x270 [ 514.101328][ C0] process_backlog+0x228/0x420 [ 514.106087][ C0] __napi_poll+0x5f/0x300 [ 514.110409][ C0] net_rx_action+0x452/0x930 [ 514.114997][ C0] handle_softirqs+0xb9/0x280 [ 514.119681][ C0] do_softirq+0x45/0x60 [ 514.123846][ C0] __local_bh_enable_ip+0x70/0x80 [ 514.128878][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 514.133818][ C0] batadv_tt_purge+0x2cd/0x610 [ 514.138592][ C0] process_scheduled_works+0x4cd/0x9d0 [ 514.144053][ C0] worker_thread+0x581/0x770 [ 514.148641][ C0] kthread+0x488/0x510 [ 514.152718][ C0] ret_from_fork+0x148/0x280 [ 514.157317][ C0] ret_from_fork_asm+0x1a/0x30 [ 514.162086][ C0] [ 514.164398][ C0] write to 0xffff888149f0d428 of 8 bytes by interrupt on cpu 0: [ 514.172023][ C0] bond_rcv_validate+0x202/0x7a0 [ 514.176961][ C0] bond_handle_frame+0xde/0x5e0 [ 514.181805][ C0] __netif_receive_skb_core+0x5b1/0x1950 [ 514.187434][ C0] __netif_receive_skb+0x59/0x270 [ 514.192454][ C0] netif_receive_skb+0x4b/0x2d0 [ 514.197335][ C0] br_pass_frame_up+0x23b/0x330 [ 514.202195][ C0] br_handle_frame_finish+0xdb5/0xfc0 [ 514.207576][ C0] br_nf_pre_routing_finish+0x8af/0xbe0 [ 514.213130][ C0] NF_HOOK+0x1ec/0x230 [ 514.217201][ C0] br_nf_pre_routing+0xad8/0xbd0 [ 514.222141][ C0] br_handle_frame+0x51e/0xa30 [ 514.226914][ C0] __netif_receive_skb_core+0x5b1/0x1950 [ 514.232548][ C0] __netif_receive_skb+0x59/0x270 [ 514.237568][ C0] process_backlog+0x228/0x420 [ 514.242334][ C0] __napi_poll+0x5f/0x300 [ 514.246655][ C0] net_rx_action+0x452/0x930 [ 514.251244][ C0] handle_softirqs+0xb9/0x280 [ 514.255934][ C0] do_softirq+0x45/0x60 [ 514.260095][ C0] __local_bh_enable_ip+0x70/0x80 [ 514.265129][ C0] kernel_fpu_end+0x6c/0x80 [ 514.269627][ C0] blake2s_compress+0x67/0x1740 [ 514.274485][ C0] blake2s_final+0x6a/0xa0 [ 514.278905][ C0] hmac+0x3a1/0x400 [ 514.282724][ C0] message_ephemeral+0x1e6/0x260 [ 514.287675][ C0] wg_noise_handshake_create_initiation+0x15e/0x610 [ 514.294271][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 514.300336][ C0] process_scheduled_works+0x4cd/0x9d0 [ 514.305794][ C0] worker_thread+0x581/0x770 [ 514.310387][ C0] kthread+0x488/0x510 [ 514.314459][ C0] ret_from_fork+0x148/0x280 [ 514.319055][ C0] ret_from_fork_asm+0x1a/0x30 [ 514.323823][ C0] [ 514.326138][ C0] value changed: 0x0000000100005365 -> 0x0000000100005366 [ 514.333237][ C0] [ 514.335545][ C0] Reported by Kernel Concurrency Sanitizer on: [ 514.341690][ C0] CPU: 0 UID: 0 PID: 19319 Comm: kworker/u8:38 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.353323][ C0] Tainted: [W]=WARN [ 514.357117][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.367170][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 514.374114][ C0] ================================================================== [ 517.073328][ C0] net_ratelimit: 67694 callbacks suppressed [ 517.073345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 517.073481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 517.079327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 517.091409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.103398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 517.115308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 517.127012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 517.139067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 517.151049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 517.162902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 520.665919][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.083254][ C0] net_ratelimit: 60625 callbacks suppressed [ 522.083271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 522.083569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 522.089254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 522.101633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 522.113292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 522.125197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 522.137080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 522.149149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:b6:87:31:31:9d, vlan:0) [ 522.160992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 522.172848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)