last executing test programs: 11m30.568053613s ago: executing program 32 (id=1176): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff7f000001000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000042050000000000003b00000000000000fdffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000010000002cbd7000003500000a00040050000000000000001c00040007004e244e200000ac14142e00000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000440)=""/138, 0x8a) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf2505000000", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000150800000000a70900060000f4035800000000000000000000241be30eec6fcae99a1b5de4cbdfffc6e155a7b7cb7c284e04054f968239e976b791ae9acce5"]) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f00000001c0)='async\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x25, 0x3, 0x7) 8m45.332049109s ago: executing program 33 (id=1861): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000fd09", @ANYRES32, @ANYBLOB="feffffff00"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r1}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x2, r0, 0x2) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r4 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x1a003}) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f00000001c0)={'ip6_vti0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x4004010) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) msync(&(0x7f0000aaf000/0x4000)=nil, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6m54.031124099s ago: executing program 34 (id=2211): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_socket_connect_nvme_tcp() perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00') perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000080000000000000000000000095000000000000009f870d484f25252acfab48de8536060639a5ae5c957fa957049540ddc1901878a59cb285ddca8c091e7c4498b151e97cd4fe6c3dba0e07e50ef31924e6e66c0ffe0d58cc6130f853ad6a384ac6762c94f4aa3c6b40b9"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x100, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xe, 0x1) ioctl$TCSETSW(r5, 0x5403, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) 6m33.441606362s ago: executing program 35 (id=2258): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000340)="59fbca3d86b5f3db49eed9c46fcab8d637660713d1e918bc394c51d3bb343ba76a96b409e6382a4faea49818120c42f23cb1c71959c544228ed1d20cb872aef00ea81807190bf6ce8535f983c7c78b367b4cab599bfef1a520dba938602c2fe10b4f5d7b0a6a7f26126f64af7d488ba32e8b6d4c15e2759f8d6f266a785beaaa002e82263c03ec5ff8e2d09e27a2309cfc1eef0517950f643618a2657a5ae7e544e34a5824003a5c8a26a728fbe7ec79cb0316548cfc12408c044f167e", &(0x7f00000004c0)=""/92, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040), &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) fchdir(r1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x30bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8209}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c}, 0x80) r7 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x40010, 0xffffffffffffffff, 0xec776000) keyctl$describe(0x6, r7, &(0x7f0000004580)=""/185, 0xb9) unshare(0x2040400) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') listen(r8, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x4, 0x0, 0x0) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000540)=0x2, 0x4) 6m0.761420466s ago: executing program 36 (id=2305): r0 = socket$igmp(0x2, 0x3, 0x2) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r7, 0xb) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) shmctl$SHM_UNLOCK(r7, 0xc) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x41, 0x2003206, @vifc_lcl_addr=@multicast2, @private=0xa010104}, 0x10) 3m5.532906315s ago: executing program 37 (id=4254): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1a00805, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c626c6f636b3d3078303030303030303030303430302c000000008ad60ce8c41ca9f494b20105d3ae6466cc4101ddc2559fb0938c3a0dfbb6438e671e9a4cfe00a9ba486787f448f7303a1ddacecb68bcffea138db3704c5f2574848177675e440e7b3c3eec741f1ca7b78b79f2a38246fdda4cc5935630004caa753e60f9685e8d949c7402bb88f243f42bdf53fd8731913427c4f57af403a6"], 0x0, 0x417, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000002080)=""/4096, 0x1000) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m52.493076905s ago: executing program 5 (id=4965): r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x49, 0x5, 0x3, 0x0, 0x6c, 0x31db4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x8004, 0x3, 0x7, 0x4, 0x3, 0x81, 0x7, 0x0, 0x40, 0x0, 0x7}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180021c8ffffffff00000000010000007112feff000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0xcc05, 0x0, 0x0, 0x0, 0x55e, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r2, @ANYRES64], 0x3c}}, 0x4004) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) 1m52.345768998s ago: executing program 5 (id=4967): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @private=0xa010101}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) close(0x3) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x49, 0x5, 0x3, 0x0, 0x6c, 0x31db4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x8004, 0x3, 0x7, 0x4, 0x3, 0x81, 0x7, 0x0, 0x40, 0x0, 0x7}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180021c8ffffffff00000000010000007112feff000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0xcc05, 0x0, 0x0, 0x0, 0x55e, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r2, @ANYRES64=r1], 0x3c}}, 0x4004) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) 1m52.096434802s ago: executing program 5 (id=4969): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 1m50.941400999s ago: executing program 5 (id=4984): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 1m50.858198544s ago: executing program 5 (id=4986): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xec}}, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="796f44288119253de8d577fa38a20b66a6ed4d45ff8d614b7ca3c66946ad5848af4308f5ae16bb44565ff14708d334c741164f253fe5c7f7d1c6594372dae01dde19566860", @ANYBLOB="053a62a47e3769c98545f31ed50a8487aa1cc4c6279b5b6c64dc24e9bbc2ae06c1a0c947ee9366f02ff80a095d986e45f4e7d447bb7419f0e7c56bc0c8b383f7b71f91e50a648ebab649d0e9982c385bf66671d61bdaf9a8b7cdf67a11e2c78b50a18afebb2cd5e9", @ANYBLOB="f6105f21e4c1172a996659029fe6473ac55a42ded1ab167f78dc7c601ad60313abcdf2e8a9f66b673d2fbceb26f32fca64d72e40dff6d84db34991d5e7a5e9417620e264adb08dc0ad4a1e54a2688cc36d2bbd473a1c229f71f1aac0e1cf41307d1eb476b78b69988f42e8c1b10d17bccb8719ef18e3186ce1f849de31e9773726b8205c2128", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=0x0], 0x4, 0x25c, &(0x7f0000000000)="$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") ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5d) sendfile(r6, r6, 0x0, 0x7f03) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x454d}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="3f612000fcffff00009bffff10000000"], &(0x7f0000000600)='GPL\x00', 0x7, 0x9c, &(0x7f0000000700)=""/156, 0x41000, 0x60, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r6, r6], 0x0, 0x10, 0x7}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x2f, 0xff, 0x14}, 0x2c) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESHEX=r4, @ANYRES8=r7, @ANYRES64=r3, @ANYRESHEX=r8, @ANYBLOB="e5291a7016a4e7e944c1b10ff7550b9192ace552b383dc6160eb06da458cc1", @ANYRES8=r5], 0x54}}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x58, r9, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m50.813945976s ago: executing program 5 (id=4987): r0 = syz_io_uring_setup(0x123d, &(0x7f0000000080)={0x0, 0xc978, 0x3000, 0x4, 0x1ed}, 0x0, &(0x7f0000000100)) futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) poll(&(0x7f0000000140)=[{r0, 0x100}], 0x1, 0x8000) unshare(0x26020480) clock_getres(0x6, &(0x7f0000000180)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x56) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x2000) umount2(&(0x7f0000000200)='./file1\x00', 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000280)="f9", 0x1, 0x20000040, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x8c9d0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) 1m50.774310148s ago: executing program 38 (id=4987): r0 = syz_io_uring_setup(0x123d, &(0x7f0000000080)={0x0, 0xc978, 0x3000, 0x4, 0x1ed}, 0x0, &(0x7f0000000100)) futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) poll(&(0x7f0000000140)=[{r0, 0x100}], 0x1, 0x8000) unshare(0x26020480) clock_getres(0x6, &(0x7f0000000180)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x56) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x2000) umount2(&(0x7f0000000200)='./file1\x00', 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000280)="f9", 0x1, 0x20000040, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x8c9d0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) 1m46.610767321s ago: executing program 9 (id=5025): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r3, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000f00)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, "1d", "f09c60", 0xfbfb, "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"}}}}}, 0x0) 1m46.306963994s ago: executing program 9 (id=5019): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m46.041897446s ago: executing program 9 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x0, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m45.892611948s ago: executing program 9 (id=5022): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 1m45.832393027s ago: executing program 9 (id=5023): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x50000048) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4, 0x2, [0x2, 0x5]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r7, &(0x7f0000000100)=0x4) socket(0x2b, 0x1, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xfffffff8}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x38, r10, 0x917, 0x400000, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IFNAME={0xfffffffffffffc7e, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000140)={r8, 0x3}, 0x8) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) 1m45.589989442s ago: executing program 9 (id=5027): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000440)=""/138, 0x8a) r6 = syz_genetlink_get_family_id$batadv(0x0, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf2505000000", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000150800000000a70900060000f4035800000000000000000000241be30eec6fcae99a1b5de4cbdfffc6e155a7b7cb7c284e04054f968239e976b791ae9acce5"]) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f00000001c0)='async\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x25, 0x3, 0x7) 1m45.587277252s ago: executing program 39 (id=5027): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000440)=""/138, 0x8a) r6 = syz_genetlink_get_family_id$batadv(0x0, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf2505000000", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000150800000000a70900060000f4035800000000000000000000241be30eec6fcae99a1b5de4cbdfffc6e155a7b7cb7c284e04054f968239e976b791ae9acce5"]) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f00000001c0)='async\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x25, 0x3, 0x7) 46.971224372s ago: executing program 2 (id=5925): unshare(0x2c020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000868016b50000000000000000181100", @ANYRES16], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 46.90780495s ago: executing program 2 (id=5928): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40800) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 46.6883445s ago: executing program 2 (id=5931): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2d, &(0x7f0000000040), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @remote, 0x80000001}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) r8 = openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) fallocate(r8, 0x10, 0x6, 0x10001) socket$packet(0x11, 0x2, 0x300) sync() 44.79506506s ago: executing program 2 (id=5960): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 44.745088971s ago: executing program 2 (id=5962): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, &(0x7f0000000300)={0x9, 0x1, 0x3, 0xfffffffffffffff9}) mq_timedreceive(r1, &(0x7f0000000080)=""/168, 0xa8, 0x0, &(0x7f0000000140)) 44.557445187s ago: executing program 2 (id=5965): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000000c0)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@bh}, {@data_journal}]}, 0x1, 0x45d, &(0x7f0000000740)="$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") r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0) 44.491152644s ago: executing program 40 (id=5965): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000000c0)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@bh}, {@data_journal}]}, 0x1, 0x45d, &(0x7f0000000740)="$eJzs28uPFMUfAPBv98wuP547P4IPHioRjcTHwi6IHLxoNPGgiYke8LjuLgQZWMOuiRCiYAweDYl349GEv8CTXox6MvGqng0JMVxAT2N6ppudbWbWfc3Oynw+SUNVd/VUfbu7Zqq7tgMYWPuzf5KIbRHxa0SMtLILC+xv/Xfn1qXJv25dmkyi0Xjrz6RZ7vatS5NF0WK/rUWmGpF+msTeDvXOXrh4ZqJenz6f5w/NnX3/0OyFi8+dPjtxavrU9Lnx48ePHhl74dj482sSZxbX7T0fzezb/do7196YPHHt3R+vJ0X8pThWrxptH93Rk43G2lW3AWxvSyfVPjaEZankV+tQs/+PRCXmT95IvPpJXxsH9FSj0Wg82H3z5QZwH0ui3y0A+qP4oc/uf4tlnYYeG8LNl1o3QFncd/KltaUaaV5mqHR/u5b2R8SJy39/mS1Rfg6xuUeVAgAD7dts/PNsp/FfGu3PhXbkcyi1iPh/ROyMiGMRsSsiHoholn0oIh5eZv3lSZJ7x5/pjRUFtkTZ+O/FfG5r4fivGP1FrZLntjfjH0pOnq5PH86PycEY2pTlxxap47tXfvm827b28V+2ZPUXY8G8HTeqmxbuMzUxN7GamNvdvBKxp9op/uTuTEASEbsjYs8K6zj99Nf7um3rEv/wkj54DeaZGl9FPNU6/5ejFH8hWXx+8tD/oj59eFPkV8W9fvr56pvd6v/3899b2fnf0vH6L+L/vZa0z9fOLr+Oq7991vWecqXX/3Dy9oJ1H07MzZ0fixhOXm/ma+3rx0vlxufLZ/EfPNC5/++M+SOxNyKyi/iRiHg0Ih5r++56PCIOLBL/Dy8/8d7K4++tLP6pRc9/lM7/fGI4ymsunsn2O18qXDnz/TcLKq0tJ/7s/B9tpg7ma5by/VduV5YoImrftJpjBwAAAP8VaURsiyQdvZtO09HR1t/w74otaX1mdu6ZkzMfnJtqvSNQi6G0eP450vY8dCy/rS/y46X8kfy58ReVzc386ORMfarfwcOA29ql/2f+qPS7dUDPeV8LBpf+D4NL/4fBpf/D4OrQ/716BgOi0+//x31oB7D+Sv1/0Wk/AwO4v7j/h8Gl/8Pg0v9hIF2JuOe9/vVLXM9bsS6VphGx4t0jVln7jjzUvhznXiQi3RDNkOhRoo9fSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGvonwAAAP//UP3YqQ==") r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0) 40.096243384s ago: executing program 4 (id=6018): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xf9, 0x553, &(0x7f00000009c0)="$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") socket(0x2a, 0x1, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0x14, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@hopopts={0x62}], {0x4e20, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 40.025502561s ago: executing program 4 (id=6022): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xec}}, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="796f44288119253de8d577fa38a20b66a6ed4d45ff8d614b7ca3c66946ad5848af4308f5ae16bb44565ff14708d334c741164f253fe5c7f7d1c6594372dae01dde19566860", @ANYBLOB="053a62a47e3769c98545f31ed50a8487aa1cc4c6279b5b6c64dc24e9bbc2ae06c1a0c947ee9366f02ff80a095d986e45f4e7d447bb7419f0e7c56bc0c8b383f7b71f91e50a648ebab649d0e9982c385bf66671d61bdaf9a8b7cdf67a11e2c78b50a18afebb2cd5e9", @ANYBLOB="f6105f21e4c1172a996659029fe6473ac55a42ded1ab167f78dc7c601ad60313abcdf2e8a9f66b673d2fbceb26f32fca64d72e40dff6d84db34991d5e7a5e9417620e264adb08dc0ad4a1e54a2688cc36d2bbd473a1c229f71f1aac0e1cf41307d1eb476b78b69988f42e8c1b10d17bccb8719ef18e3186ce1f849de31e9773726b8205c2128", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=0x0], 0x4, 0x25c, &(0x7f0000000000)="$eJzs2s9rHGUYB/Bn0h9JU5ONaJUWxBc9qJehydlDg7QgBhRthCpIp2aiS8bdkFkCK0Jz0qtHj57FowdBkB695OJf0IO3XHKsII6kG8O2SYuYbbeUz+eyDzzz3X2G9+XlPezOm99+sbZa56tFLyayLE5fiq24k8VcTMS/tuKN16799tIH1z56Z3Fp6fL7KV1ZvDq/kFKaffnXj7/68ZVbvbMf/jT7y2Rsz32ys7vwx/YL2+d3/r76ebtO7Tp1ur1UpBvdbq+4UZVppV2v5Sm9V5VFXaZ2py437umvVt319X4qOisz0+sbZV2notNPa2U/9bqpt9FPxWdFu5PyPE8z08FxLP9wp2litzl1PZqmOfN9nL0VM7ejFdmzKXvuUnbuevbiVnb+u8lxD8ojcrD+5zYfvP67TdMa96A8EkOH+lRE9c3m8uby4HPQX1yNdlRRxsVoxV+xd0zsG9RX3l66fDHdNRdfVzf38zc3l08M8rGfn49WzB2dnx/k0735yZge/v2FaMXzR+cXjsxPxeuvDuXzaMXvn0Y3qliJvexB/ueISG+9u3Rf/sLd5wAAnjZ5OnDo/nZ7r58/qD/IP+x+OBURQ/fD++5XJ+PCyXG/PXX/y7WiqsoNxeiKvc3/BIwxpuLUceJn9vflQ5555nBrIkYz/Onjfc/siMYYXXHi/8fHfDDxWPx5sOiHe9k4BgIAAAAAAAAAAOA/eRx/Qhz3OwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+2fwIAAP//gwDHfQ==") ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5d) sendfile(r6, r6, 0x0, 0x7f03) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x454d}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="3f612000fcffff00009bffff10000000"], &(0x7f0000000600)='GPL\x00', 0x7, 0x9c, &(0x7f0000000700)=""/156, 0x41000, 0x60, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r8, r6, r6], 0x0, 0x10, 0x7}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x2f, 0xff, 0x14}, 0x2c) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRESHEX=r9, @ANYBLOB="e5291a7016a4e7e944c1b10ff7550b9192ace552b383dc6160eb06da458cc1", @ANYRES8=r5], 0x54}}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x58, r10, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 39.860476861s ago: executing program 4 (id=6028): socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xc, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 39.334832123s ago: executing program 4 (id=6035): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b145b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 39.310115889s ago: executing program 4 (id=6037): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000b00)="d02a852a981d9a07f4d509a26f7d3f7432a92d58105c36e5", 0x18}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x81, r1, 'id0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500000000000000339f30dd2f2eed4e94c93ebf5b00000f000000080003", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r9, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace', 0x101, 0x2) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r10, 0x54a6) setfsuid(0xee00) rmdir(&(0x7f0000003b80)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') 39.006676763s ago: executing program 4 (id=6042): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000700000000000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 39.006362373s ago: executing program 41 (id=6042): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000700000000000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 19.532349822s ago: executing program 0 (id=6334): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000100)='smaps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 18.649184629s ago: executing program 0 (id=6347): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES64=r0], 0x3c}}, 0x8010) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {0x5, 0xfff3}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 18.401552803s ago: executing program 0 (id=6351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)='U', 0x1}], 0x1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 18.349667844s ago: executing program 0 (id=6353): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 18.202618317s ago: executing program 0 (id=6357): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2d, &(0x7f0000000040), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @remote, 0x80000001}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) r8 = openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) fallocate(r8, 0x10, 0x6, 0x10001) socket$packet(0x11, 0x2, 0x300) sync() 17.866313985s ago: executing program 0 (id=6362): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xec}}, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="796f44288119253de8d577fa38a20b66a6ed4d45ff8d614b7ca3c66946ad5848af4308f5ae16bb44565ff14708d334c741164f253fe5c7f7d1c6594372dae01dde19566860", @ANYBLOB="053a62a47e3769c98545f31ed50a8487aa1cc4c6279b5b6c64dc24e9bbc2ae06c1a0c947ee9366f02ff80a095d986e45f4e7d447bb7419f0e7c56bc0c8b383f7b71f91e50a648ebab649d0e9982c385bf66671d61bdaf9a8b7cdf67a11e2c78b50a18afebb2cd5e9", @ANYBLOB="f6105f21e4c1172a996659029fe6473ac55a42ded1ab167f78dc7c601ad60313abcdf2e8a9f66b673d2fbceb26f32fca64d72e40dff6d84db34991d5e7a5e9417620e264adb08dc0ad4a1e54a2688cc36d2bbd473a1c229f71f1aac0e1cf41307d1eb476b78b69988f42e8c1b10d17bccb8719ef18e3186ce1f849de31e9773726b8205c2128", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=0x0], 0x4, 0x25c, &(0x7f0000000000)="$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") ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5d) sendfile(r6, r6, 0x0, 0x7f03) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x454d}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="3f612000fcffff00009bffff10000000"], &(0x7f0000000600)='GPL\x00', 0x7, 0x9c, &(0x7f0000000700)=""/156, 0x41000, 0x60, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r8, r6, r6], 0x0, 0x10, 0x7}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x2f, 0xff, 0x14}, 0x2c) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESHEX=r4, @ANYRES8=r7, @ANYRES64=r3, @ANYRESHEX=r9, @ANYBLOB="e5291a7016a4e7e944c1b10ff7550b9192ace552b383dc6160eb06da458cc1", @ANYRES8=r5], 0x54}}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x4c, r10, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 17.865968124s ago: executing program 42 (id=6362): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xec}}, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="796f44288119253de8d577fa38a20b66a6ed4d45ff8d614b7ca3c66946ad5848af4308f5ae16bb44565ff14708d334c741164f253fe5c7f7d1c6594372dae01dde19566860", @ANYBLOB="053a62a47e3769c98545f31ed50a8487aa1cc4c6279b5b6c64dc24e9bbc2ae06c1a0c947ee9366f02ff80a095d986e45f4e7d447bb7419f0e7c56bc0c8b383f7b71f91e50a648ebab649d0e9982c385bf66671d61bdaf9a8b7cdf67a11e2c78b50a18afebb2cd5e9", @ANYBLOB="f6105f21e4c1172a996659029fe6473ac55a42ded1ab167f78dc7c601ad60313abcdf2e8a9f66b673d2fbceb26f32fca64d72e40dff6d84db34991d5e7a5e9417620e264adb08dc0ad4a1e54a2688cc36d2bbd473a1c229f71f1aac0e1cf41307d1eb476b78b69988f42e8c1b10d17bccb8719ef18e3186ce1f849de31e9773726b8205c2128", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=0x0], 0x4, 0x25c, &(0x7f0000000000)="$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") ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5d) sendfile(r6, r6, 0x0, 0x7f03) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x454d}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="3f612000fcffff00009bffff10000000"], &(0x7f0000000600)='GPL\x00', 0x7, 0x9c, &(0x7f0000000700)=""/156, 0x41000, 0x60, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r8, r6, r6], 0x0, 0x10, 0x7}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x2f, 0xff, 0x14}, 0x2c) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESHEX=r4, @ANYRES8=r7, @ANYRES64=r3, @ANYRESHEX=r9, @ANYBLOB="e5291a7016a4e7e944c1b10ff7550b9192ace552b383dc6160eb06da458cc1", @ANYRES8=r5], 0x54}}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x4c, r10, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.268521378s ago: executing program 6 (id=6521): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x40004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 1.240748538s ago: executing program 6 (id=6524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) 1.150553892s ago: executing program 6 (id=6525): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @private=0xa010101}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x49, 0x5, 0x3, 0x0, 0x6c, 0x31db4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x8004, 0x3, 0x7, 0x4, 0x3, 0x81, 0x7, 0x0, 0x40, 0x0, 0x7}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180021c8ffffffff00000000010000007112feff000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0xcc05, 0x0, 0x0, 0x0, 0x55e, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r3, @ANYRES64=r2], 0x3c}}, 0x4004) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) 1.066868827s ago: executing program 8 (id=6528): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x250, 0x460, 0x460, 0x250, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0xd8000000, {0x9402}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x300}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private1, @empty, [], [], 'pim6reg0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.017704967s ago: executing program 3 (id=6530): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20) 954.777606ms ago: executing program 6 (id=6542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 875.213361ms ago: executing program 1 (id=6532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 705.21014ms ago: executing program 8 (id=6533): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000017}) openat$tun(0xffffffffffffff9c, 0x0, 0x20, 0x0) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 515.630135ms ago: executing program 7 (id=6534): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x65874000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 508.363894ms ago: executing program 8 (id=6535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000080)=ANY=[], 0x0) syz_emit_ethernet(0xbc1, &(0x7f0000000a00)=ANY=[], 0x0) 469.246056ms ago: executing program 6 (id=6536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xc2) 461.241835ms ago: executing program 8 (id=6537): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$sndseq(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001050}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb050700000000000000f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 436.61291ms ago: executing program 6 (id=6539): openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 422.708938ms ago: executing program 7 (id=6540): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004840) 323.180959ms ago: executing program 7 (id=6541): socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x200007f, 0xd, 0x5, 0x35, 0x58, "c695fda58793a9ac2679ae3e6d7c5b4e0bdb90", 0x4, 0xfff7ffff}) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 322.996789ms ago: executing program 1 (id=6543): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 322.602149ms ago: executing program 7 (id=6544): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000b00)="d02a852a981d9a07f4d509a26f7d3f7432a92d58105c36e5", 0x18}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x81, r1, 'id0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500000000000000339f30dd2f2eed4e94c93ebf5b00000f00000008000300", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r9, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace', 0x101, 0x2) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r10, 0x54a6) setfsuid(0xee00) rmdir(&(0x7f0000003b80)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') 253.500436ms ago: executing program 1 (id=6545): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x106200, 0x10004, 0x20da, 0x7, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 250.676566ms ago: executing program 1 (id=6546): socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000040000000000fb6c3b80c05b8f9aec742cc7791c077bd22d5e47a0b99157c08402dc74887107ea43687eb49d9d384c4227e58f65731668af2eefd51428337ec13ced2d01d54fe09b5c33cf48940bb4493365f6afad46cb4fa0a2baa7aafeb7b8b09037e00b11f27fd19591ca28b22f366869fbeb7b3dd08b90f5d90ad44943e000"/154, @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="76658e682a5f746f5f6261746164763231"], 0x12) 235.695243ms ago: executing program 7 (id=6547): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @private=0xa010101}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x49, 0x5, 0x3, 0x0, 0x6c, 0x31db4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x8004, 0x3, 0x7, 0x4, 0x3, 0x81, 0x7, 0x0, 0x40, 0x0, 0x7}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180021c8ffffffff00000000010000007112feff000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0xcc05, 0x0, 0x0, 0x0, 0x55e, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r3, @ANYRES64=r2], 0x3c}}, 0x4004) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) 216.34934ms ago: executing program 8 (id=6548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x5, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 154.130658ms ago: executing program 1 (id=6549): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 153.879038ms ago: executing program 3 (id=6550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xc2) 148.237167ms ago: executing program 1 (id=6551): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0x8094) 129.036354ms ago: executing program 8 (id=6552): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x200000000000006}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 115.829921ms ago: executing program 3 (id=6553): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) r3 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ftruncate(r3, 0x2007ffa) sendfile(r4, r3, 0x0, 0x7ffff000) 90.616036ms ago: executing program 7 (id=6554): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 34.634506ms ago: executing program 3 (id=6555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r5}, 0x5) 31.661685ms ago: executing program 3 (id=6556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000700)=0xe) sendfile(r2, r3, 0x0, 0x4) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000740)={0x800001, 0xffffffff, 0x4e8, 0x3, 0xfe, "f4951600"}) 0s ago: executing program 3 (id=6557): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000b00)="d02a852a981d9a07f4d509a26f7d3f7432a92d58105c36e5", 0x18}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x81, r1, 'id0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500000000000000339f30dd2f2eed4e94c93ebf5b00000f00000008000300", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r9, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace', 0x101, 0x2) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r10, 0x54a6) setfsuid(0xee00) rmdir(&(0x7f0000003b80)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') kernel console output (not intermixed with test programs): link_route_socket pid=21909 comm=syz.9.4763 [ 1008.439932][ T28] audit: type=1400 audit(1773253415.543:3031): avc: denied { mount } for pid=21916 comm="syz.9.4767" name="/" dev="ramfs" ino=60224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1008.492519][T21917] sctp: [Deprecated]: syz.9.4767 (pid 21917) Use of int in maxseg socket option. [ 1008.492519][T21917] Use struct sctp_assoc_value instead [ 1008.521014][ T28] audit: type=1400 audit(1773253415.593:3032): avc: denied { watch } for pid=21916 comm="syz.9.4767" path="/" dev="ramfs" ino=60224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1008.612139][T21917] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4767'. [ 1008.927525][T21937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4771'. [ 1009.073304][T21937] lo speed is unknown, defaulting to 1000 [ 1010.399345][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1010.415414][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1010.427589][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1010.440134][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1011.933333][T22010] netlink: 'syz.5.4781': attribute type 12 has an invalid length. [ 1011.954005][T22010] netlink: 'syz.5.4781': attribute type 29 has an invalid length. [ 1011.971724][T22010] __nla_validate_parse: 1 callbacks suppressed [ 1011.971744][T22010] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4781'. [ 1012.019734][T22014] sctp: [Deprecated]: syz.3.4784 (pid 22014) Use of int in maxseg socket option. [ 1012.019734][T22014] Use struct sctp_assoc_value instead [ 1012.041494][T22014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4784'. [ 1012.053621][T22010] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4781'. [ 1012.256218][T22021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4787'. [ 1012.282731][T22023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4789'. [ 1012.303956][T22021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4787'. [ 1012.317463][T22023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4789'. [ 1013.252065][T22045] loop9: detected capacity change from 0 to 128 [ 1014.030781][T22048] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.4792'. [ 1014.041146][T22045] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.4792'. [ 1014.621989][T22058] sctp: [Deprecated]: syz.5.4798 (pid 22058) Use of int in maxseg socket option. [ 1014.621989][T22058] Use struct sctp_assoc_value instead [ 1014.707866][T22058] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4798'. [ 1015.346966][ T3911] kworker/u8:19: attempt to access beyond end of device [ 1015.346966][ T3911] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1015.498027][ T7946] IPVS: starting estimator thread 0... [ 1015.660976][T22078] IPVS: using max 1872 ests per chain, 93600 per kthread [ 1016.891373][T22105] sctp: [Deprecated]: syz.9.4815 (pid 22105) Use of int in maxseg socket option. [ 1016.891373][T22105] Use struct sctp_assoc_value instead [ 1017.012168][T22113] loop9: detected capacity change from 0 to 128 [ 1017.264234][T22117] __nla_validate_parse: 8 callbacks suppressed [ 1017.264250][T22117] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4820'. [ 1017.324913][T22117] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4820'. [ 1017.578459][T22128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1017.603783][T22128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1017.991202][T22140] sctp: [Deprecated]: syz.5.4827 (pid 22140) Use of int in maxseg socket option. [ 1017.991202][T22140] Use struct sctp_assoc_value instead [ 1018.042252][T22143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4827'. [ 1018.325459][T22154] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4833'. [ 1018.376362][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4833'. [ 1018.523015][T22157] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4835'. [ 1018.532637][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4835'. [ 1018.999838][T22170] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4838'. [ 1020.500126][T22179] sctp: [Deprecated]: syz.5.4841 (pid 22179) Use of int in maxseg socket option. [ 1020.500126][T22179] Use struct sctp_assoc_value instead [ 1020.705909][ T28] audit: type=1400 audit(1773253427.813:3033): avc: denied { read } for pid=22180 comm="syz.3.4842" path="socket:[61577]" dev="sockfs" ino=61577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1021.064430][T22195] loop9: detected capacity change from 0 to 512 [ 1021.089899][T22195] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1021.183883][T22195] EXT4-fs (loop9): 1 truncate cleaned up [ 1021.253592][T22195] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.521018][ T28] audit: type=1400 audit(1773253428.573:3034): avc: denied { mounton } for pid=22203 comm="syz.5.4850" path="/proc/2031/task" dev="proc" ino=61631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1021.694486][T22234] sctp: [Deprecated]: syz.2.4857 (pid 22234) Use of int in maxseg socket option. [ 1021.694486][T22234] Use struct sctp_assoc_value instead [ 1022.883390][T22195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.996907][T22246] __nla_validate_parse: 7 callbacks suppressed [ 1022.996950][T22246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1023.042723][T22248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4860'. [ 1023.078991][T22248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4860'. [ 1023.093779][T22242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1023.270574][ T28] audit: type=1326 audit(1773253430.373:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.3.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46180c799 code=0x7ffc0000 [ 1023.306933][ T28] audit: type=1326 audit(1773253430.403:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.3.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46180c799 code=0x7ffc0000 [ 1023.334217][ T28] audit: type=1326 audit(1773253430.403:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.3.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46180c799 code=0x7ffc0000 [ 1023.358751][ T28] audit: type=1326 audit(1773253430.403:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.3.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd46180c799 code=0x7ffc0000 [ 1023.393670][ T28] audit: type=1326 audit(1773253430.403:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.3.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46180c799 code=0x7ffc0000 [ 1023.417917][ T28] audit: type=1326 audit(1773253430.403:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.3.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46180c799 code=0x7ffc0000 [ 1023.417960][ T28] audit: type=1326 audit(1773253430.403:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.3.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46180c799 code=0x7ffc0000 [ 1023.652819][T22269] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4861'. [ 1023.653489][T22266] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4861'. [ 1024.250240][ T28] audit: type=1326 audit(1773253430.403:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22254 comm="syz.3.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46180c799 code=0x7ffc0000 [ 1024.445495][T22264] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4864'. [ 1024.532194][T22284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1024.560409][T22284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1024.598593][T22288] sctp: [Deprecated]: syz.9.4872 (pid 22288) Use of int in maxseg socket option. [ 1024.598593][T22288] Use struct sctp_assoc_value instead [ 1024.619445][T22288] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4872'. [ 1025.603188][T22316] futex_wake_op: syz.9.4883 tries to shift op by -1; fix this program [ 1025.775706][T22323] sctp: [Deprecated]: syz.3.4886 (pid 22323) Use of int in maxseg socket option. [ 1025.775706][T22323] Use struct sctp_assoc_value instead [ 1026.202928][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1026.202945][ T28] audit: type=1326 audit(1773253433.313:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9f01c799 code=0x7ffc0000 [ 1026.246479][ T28] audit: type=1326 audit(1773253433.313:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9f01c799 code=0x7ffc0000 [ 1026.270804][ T28] audit: type=1326 audit(1773253433.313:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9f01c799 code=0x7ffc0000 [ 1026.295882][ T28] audit: type=1326 audit(1773253433.313:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2c9f01c799 code=0x7ffc0000 [ 1026.323862][T22364] loop9: detected capacity change from 0 to 128 [ 1027.131133][ T28] audit: type=1326 audit(1773253433.563:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c9f01c799 code=0x7ffc0000 [ 1027.239389][ T28] audit: type=1326 audit(1773253433.563:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c9f01c502 code=0x7ffc0000 [ 1027.282066][T22383] sctp: [Deprecated]: syz.3.4908 (pid 22383) Use of int in maxseg socket option. [ 1027.282066][T22383] Use struct sctp_assoc_value instead [ 1027.329029][ T28] audit: type=1326 audit(1773253433.563:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2c9f01c597 code=0x7ffc0000 [ 1027.471079][ T28] audit: type=1326 audit(1773253433.563:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2c9efd9491 code=0x7ffc0000 [ 1027.689590][ T28] audit: type=1326 audit(1773253433.563:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2c9f01d589 code=0x7ffc0000 [ 1028.498597][ T4261] kworker/u8:31: attempt to access beyond end of device [ 1028.498597][ T4261] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1028.586780][ T28] audit: type=1326 audit(1773253433.563:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2c9efd94fb code=0x7ffc0000 [ 1029.389316][T22429] sctp: [Deprecated]: syz.5.4921 (pid 22429) Use of int in maxseg socket option. [ 1029.389316][T22429] Use struct sctp_assoc_value instead [ 1029.419011][T22429] __nla_validate_parse: 9 callbacks suppressed [ 1029.419090][T22429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4921'. [ 1029.474251][T22431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4922'. [ 1029.574406][T22439] sctp: [Deprecated]: syz.5.4935 (pid 22439) Use of int in maxseg socket option. [ 1029.574406][T22439] Use struct sctp_assoc_value instead [ 1029.606919][T22439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4935'. [ 1030.352333][T22456] loop9: detected capacity change from 0 to 128 [ 1030.537511][T22459] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.4930'. [ 1030.570923][T22456] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.4930'. [ 1030.881881][T22462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4932'. [ 1030.995206][T22467] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4932'. [ 1031.009758][T22466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4933'. [ 1031.125275][T22470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4933'. [ 1031.816049][T22480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4936'. [ 1032.000604][T22489] sctp: [Deprecated]: syz.5.4938 (pid 22489) Use of int in maxseg socket option. [ 1032.000604][T22489] Use struct sctp_assoc_value instead [ 1032.202613][ T4261] kworker/u8:31: attempt to access beyond end of device [ 1032.202613][ T4261] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1033.291209][ T9083] delete_channel: no stack [ 1033.484368][T22533] sctp: [Deprecated]: syz.1.4952 (pid 22533) Use of int in maxseg socket option. [ 1033.484368][T22533] Use struct sctp_assoc_value instead [ 1033.649844][T22543] loop9: detected capacity change from 0 to 128 [ 1034.653305][T22558] __nla_validate_parse: 12 callbacks suppressed [ 1034.653326][T22558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1034.734528][T22556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4959'. [ 1034.734831][T22556] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4959'. [ 1034.940995][ T7946] delete_channel: no stack [ 1034.969646][T22571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4965'. [ 1035.018542][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4965'. [ 1035.141953][T22578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4967'. [ 1035.194515][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4967'. [ 1035.327482][ T5057] kworker/u8:45: attempt to access beyond end of device [ 1035.327482][ T5057] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1035.628376][T22593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4971'. [ 1035.696807][T22597] loop9: detected capacity change from 0 to 128 [ 1035.816640][T22605] sctp: [Deprecated]: syz.9.4975 (pid 22605) Use of int in maxseg socket option. [ 1035.816640][T22605] Use struct sctp_assoc_value instead [ 1035.932226][T22605] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4975'. [ 1036.019719][T22611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4977'. [ 1036.452357][T22583] kexec: Could not allocate control_code_buffer [ 1036.752065][T22638] sctp: [Deprecated]: syz.1.4989 (pid 22638) Use of int in maxseg socket option. [ 1036.752065][T22638] Use struct sctp_assoc_value instead [ 1036.828952][ T4267] vlan0: left allmulticast mode [ 1036.845396][ T4267] bond0: left allmulticast mode [ 1036.854680][ T4267] bond_slave_0: left allmulticast mode [ 1036.866996][ T4267] bond_slave_1: left allmulticast mode [ 1036.876149][ T4267] bridge_slave_1: left allmulticast mode [ 1036.882375][ T4267] vlan0: left promiscuous mode [ 1036.887656][ T4267] bond0: left promiscuous mode [ 1036.892811][ T4267] bond_slave_0: left promiscuous mode [ 1036.899209][ T4267] bond_slave_1: left promiscuous mode [ 1036.905413][ T4267] bridge_slave_1: left promiscuous mode [ 1036.912397][ T4267] bridge0: port 2(vlan0) entered disabled state [ 1036.921220][ T4267] bridge_slave_0: left allmulticast mode [ 1036.927347][ T4267] bridge_slave_0: left promiscuous mode [ 1036.933649][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.131793][ T4267] team0: Port device bond0 removed [ 1037.165407][ T4267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.191329][ T4267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.207364][ T4267] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1037.227144][ T4267] bond0 (unregistering): Released all slaves [ 1037.235787][ T4267] bond1 (unregistering): Released all slaves [ 1037.253577][ T4267] bond2 (unregistering): Released all slaves [ 1037.316179][T22639] lo speed is unknown, defaulting to 1000 [ 1037.328380][ T4267] tipc: Left network mode [ 1037.361769][ T4267] IPVS: stopping backup sync thread 13503 ... [ 1037.389044][ T4267] hsr_slave_0: left promiscuous mode [ 1037.398556][ T4267] hsr_slave_1: left promiscuous mode [ 1037.411518][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.439393][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.476317][ T4267] pimreg (unregistering): left allmulticast mode [ 1037.567213][ T4267] team0 (unregistering): Port device team_slave_1 removed [ 1037.596740][ T4267] team0 (unregistering): Port device team_slave_0 removed [ 1037.723834][T22702] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 1037.833435][T22639] chnl_net:caif_netlink_parms(): no params data found [ 1037.898719][T22706] sctp: [Deprecated]: syz.9.5000 (pid 22706) Use of int in maxseg socket option. [ 1037.898719][T22706] Use struct sctp_assoc_value instead [ 1037.951117][T22639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.990958][T22639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.009134][T22639] bridge_slave_0: entered allmulticast mode [ 1038.043585][T22639] bridge_slave_0: entered promiscuous mode [ 1038.055169][ T4267] IPVS: stop unused estimator thread 0... [ 1038.061541][T22639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.089164][T22639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.106957][T22639] bridge_slave_1: entered allmulticast mode [ 1038.121854][T22639] bridge_slave_1: entered promiscuous mode [ 1038.178102][T22639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.197880][T22639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.238521][T22639] team0: Port device team_slave_0 added [ 1038.245821][T22639] team0: Port device team_slave_1 added [ 1038.262656][T22639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.270031][T22639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.304867][T22639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.319115][T22639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.326544][T22639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.353726][T22639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.396579][T22639] hsr_slave_0: entered promiscuous mode [ 1038.403097][T22639] hsr_slave_1: entered promiscuous mode [ 1038.628928][T22759] loop9: detected capacity change from 0 to 128 [ 1038.820229][T22639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1038.853293][T22639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1038.882973][T22639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1038.917714][T22639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1039.153342][T22639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.171576][T22639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.191946][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.199288][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.227717][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.234862][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.329775][T22639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1039.353236][T22639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1039.532861][ T5752] bridge_slave_1: left allmulticast mode [ 1039.543434][ T5752] bridge_slave_1: left promiscuous mode [ 1039.561024][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.589193][ T5752] bridge_slave_0: left allmulticast mode [ 1039.601221][ T5752] bridge_slave_0: left promiscuous mode [ 1039.621013][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.709373][T22853] __nla_validate_parse: 16 callbacks suppressed [ 1039.709395][T22853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5016'. [ 1039.802873][ T5752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.815978][ T5752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.831374][ T5752] bond0 (unregistering): Released all slaves [ 1039.844290][T22639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.865916][T22819] lo speed is unknown, defaulting to 1000 [ 1039.930411][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.945364][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.003062][ T5752] team0 (unregistering): Port device team_slave_1 removed [ 1040.023730][ T5752] team0 (unregistering): Port device team_slave_0 removed [ 1040.185943][T22639] veth0_vlan: entered promiscuous mode [ 1040.199797][T22639] veth1_vlan: entered promiscuous mode [ 1040.212376][T22819] chnl_net:caif_netlink_parms(): no params data found [ 1040.296312][T22819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.320981][T22819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.328970][T22819] bridge_slave_0: entered allmulticast mode [ 1040.336663][T22819] bridge_slave_0: entered promiscuous mode [ 1040.346587][T22819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.355255][T22819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.363158][T22819] bridge_slave_1: entered allmulticast mode [ 1040.370035][T22819] bridge_slave_1: entered promiscuous mode [ 1040.386688][T22639] veth0_macvtap: entered promiscuous mode [ 1040.403081][ T5752] IPVS: stop unused estimator thread 0... [ 1040.410645][T22639] veth1_macvtap: entered promiscuous mode [ 1040.429271][T22819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.450693][T22639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.472028][T22819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.514208][T22639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.535049][T22819] team0: Port device team_slave_0 added [ 1040.552004][ T3910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.571034][ T3910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.580371][ T3910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.601079][T22819] team0: Port device team_slave_1 added [ 1040.607105][ T3910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.657249][T22819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.672653][T22819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.701147][T22819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.722567][T22819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.732641][T22819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.759853][T22819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.876859][T22819] hsr_slave_0: entered promiscuous mode [ 1040.904587][T22819] hsr_slave_1: entered promiscuous mode [ 1040.913836][T22819] debugfs: 'hsr0' already exists in 'hsr' [ 1040.919797][T22819] Cannot create hsr debugfs directory [ 1040.969319][T22933] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5026'. [ 1041.121900][T22954] loop9: detected capacity change from 0 to 512 [ 1041.168859][T22958] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5017'. [ 1041.252752][T22954] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1041.323348][T22954] EXT4-fs error (device loop9): ext4_quota_enable:7188: comm syz.9.5019: Bad quota inum: 2, type: 1 [ 1041.339373][T22954] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 1041.401389][T14706] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1041.498251][T22819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1041.514101][T22819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1041.528229][T22819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1041.532830][T22977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5021'. [ 1041.558151][T22819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1041.609356][T22977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5021'. [ 1041.668792][T22819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.707332][T22819] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.784442][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.791625][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.814080][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.821419][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.859770][T22819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1042.046732][T22819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.058834][T23030] xt_hashlimit: size too large, truncated to 1048576 [ 1042.134600][T23017] lo speed is unknown, defaulting to 1000 [ 1042.233565][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1042.250575][T23041] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1042.266082][T22819] veth0_vlan: entered promiscuous mode [ 1042.286875][T22819] veth1_vlan: entered promiscuous mode [ 1042.304148][T23017] chnl_net:caif_netlink_parms(): no params data found [ 1042.341526][T22819] veth0_macvtap: entered promiscuous mode [ 1042.358581][T22819] veth1_macvtap: entered promiscuous mode [ 1042.435380][T23017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.445207][T23017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.452998][T23017] bridge_slave_0: entered allmulticast mode [ 1042.459754][T23017] bridge_slave_0: entered promiscuous mode [ 1042.469438][T22819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.480986][T23017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.488864][T23017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.497164][T23017] bridge_slave_1: entered allmulticast mode [ 1042.504899][T23017] bridge_slave_1: entered promiscuous mode [ 1042.515459][T22819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.542994][T23017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.553039][ T2212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.576375][T23017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.615666][ T2212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.627124][T23062] loop0: detected capacity change from 0 to 512 [ 1042.639570][ T2212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.674963][T23017] team0: Port device team_slave_0 added [ 1042.683351][ T2212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.705670][T23062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1042.729319][T23017] team0: Port device team_slave_1 added [ 1042.757165][T23017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.764650][T23017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.792087][T23017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.804142][T23017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.811889][T23017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.815146][T23062] EXT4-fs (loop0): 1 truncate cleaned up [ 1042.838752][T23017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.868812][T23062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.907290][T23017] hsr_slave_0: entered promiscuous mode [ 1042.921939][T23017] hsr_slave_1: entered promiscuous mode [ 1042.928079][T23017] debugfs: 'hsr0' already exists in 'hsr' [ 1042.948645][T23017] Cannot create hsr debugfs directory [ 1043.164131][T23074] sctp: [Deprecated]: syz.2.5036 (pid 23074) Use of int in maxseg socket option. [ 1043.164131][T23074] Use struct sctp_assoc_value instead [ 1043.256491][T23074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5036'. [ 1043.316180][T23072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.392956][T23089] xt_hashlimit: size too large, truncated to 1048576 [ 1043.451970][T23017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1043.463840][T23095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5038'. [ 1043.484211][T23017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1043.518749][T23017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1043.536621][T23017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1043.675835][T23017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.733608][T23017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.757422][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.765333][ T5752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.818867][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.826211][ T5752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.913241][T23017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1043.951820][T23017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1043.962956][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5040'. [ 1044.086585][T23017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.180164][ T8539] IPVS: starting estimator thread 0... [ 1044.272328][T23158] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1044.382768][T23017] veth0_vlan: entered promiscuous mode [ 1044.397085][T23180] netlink: 'syz.2.5043': attribute type 1 has an invalid length. [ 1044.433374][T23180] team0: Port device gretap1 added [ 1044.442212][T23017] veth1_vlan: entered promiscuous mode [ 1044.492250][T23017] veth0_macvtap: entered promiscuous mode [ 1044.514580][T23017] veth1_macvtap: entered promiscuous mode [ 1044.557811][T23017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.584775][T23189] sctp: [Deprecated]: syz.1.5046 (pid 23189) Use of int in maxseg socket option. [ 1044.584775][T23189] Use struct sctp_assoc_value instead [ 1044.605382][T23017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.624695][ T5057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.634477][ T5057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.648317][ T5057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.717069][T23208] xt_hashlimit: size too large, truncated to 1048576 [ 1044.782365][ T5057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.837651][T23215] __nla_validate_parse: 4 callbacks suppressed [ 1044.837672][T23215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5050'. [ 1044.902557][T23220] xt_hashlimit: size too large, truncated to 1048576 [ 1044.940071][T23215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5050'. [ 1045.278321][T23246] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5052'. [ 1045.624490][T23268] sctp: [Deprecated]: syz.4.5056 (pid 23268) Use of int in maxseg socket option. [ 1045.624490][T23268] Use struct sctp_assoc_value instead [ 1045.795699][T23268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5056'. [ 1045.940193][T23290] netlink: 'syz.0.5059': attribute type 1 has an invalid length. [ 1046.242529][T23301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1046.252398][T23301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1046.439709][T23323] batadv_slave_1: entered promiscuous mode [ 1046.451317][T23321] batadv_slave_1: left promiscuous mode [ 1046.813745][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5073'. [ 1047.204211][T23378] loop0: detected capacity change from 0 to 128 [ 1047.321270][ T8539] IPVS: starting estimator thread 0... [ 1047.361862][T23382] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5076'. [ 1047.421093][T23391] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1047.537646][T23407] xt_hashlimit: size too large, truncated to 1048576 [ 1047.560008][T23400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5078'. [ 1047.614350][T23400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5078'. [ 1047.860937][T23430] sctp: [Deprecated]: syz.4.5084 (pid 23430) Use of int in maxseg socket option. [ 1047.860937][T23430] Use struct sctp_assoc_value instead [ 1047.984820][T23443] loop0: detected capacity change from 0 to 128 [ 1048.029102][T23448] loop4: detected capacity change from 0 to 512 [ 1048.073515][T23448] EXT4-fs: Ignoring removed nobh option [ 1048.113421][T23448] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1048.129865][T23448] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.5090: attempt to clear invalid blocks 1 len 1 [ 1048.143231][T23448] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1048.150907][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1048.167007][ C1] EXT4-fs (loop4): initial error at time 1773253455: ext4_clear_blocks:876: inode 13 [ 1048.176813][ C1] EXT4-fs (loop4): last error at time 1773253455: ext4_clear_blocks:876: inode 13 [ 1048.186425][T23448] EXT4-fs (loop4): Remounting filesystem read-only [ 1048.195886][T23448] EXT4-fs (loop4): 1 truncate cleaned up [ 1048.205512][T23448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.222492][T23448] EXT4-fs (loop4): shut down requested (0) [ 1048.258949][T23448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.318052][T23462] loop0: detected capacity change from 0 to 512 [ 1048.349318][T23462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1048.379068][T23462] EXT4-fs (loop0): 1 truncate cleaned up [ 1048.404739][T23462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.833836][T23490] sctp: [Deprecated]: syz.4.5102 (pid 23490) Use of int in maxseg socket option. [ 1048.833836][T23490] Use struct sctp_assoc_value instead [ 1049.047875][T23462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.418212][T23526] sctp: [Deprecated]: syz.1.5115 (pid 23526) Use of int in maxseg socket option. [ 1049.418212][T23526] Use struct sctp_assoc_value instead [ 1049.547815][T23533] sctp: [Deprecated]: syz.1.5129 (pid 23533) Use of int in maxseg socket option. [ 1049.547815][T23533] Use struct sctp_assoc_value instead [ 1049.642915][T23545] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1049.688553][ T5057] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.699524][ T5057] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.715796][ T5057] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.725406][ T5057] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.923365][T23555] __nla_validate_parse: 21 callbacks suppressed [ 1049.923385][T23555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5128'. [ 1050.001352][T23555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5128'. [ 1050.005649][T23563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1050.022336][T23563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1050.249722][T23578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1050.259822][T23578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1050.358484][T23587] lo speed is unknown, defaulting to 1000 [ 1050.523554][T23594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5141'. [ 1050.544318][T23594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5141'. [ 1050.820762][T23600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5143'. [ 1050.841429][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5143'. [ 1051.176649][T23613] sctp: [Deprecated]: syz.2.5148 (pid 23613) Use of int in maxseg socket option. [ 1051.176649][T23613] Use struct sctp_assoc_value instead [ 1051.313291][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1051.313309][ T28] audit: type=1326 audit(1773253458.423:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.386422][ T28] audit: type=1326 audit(1773253458.423:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.442540][ T28] audit: type=1326 audit(1773253458.423:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.478079][ T28] audit: type=1326 audit(1773253458.423:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.507181][ T28] audit: type=1326 audit(1773253458.453:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.552236][ T28] audit: type=1326 audit(1773253458.453:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.578688][ T28] audit: type=1326 audit(1773253458.453:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.604103][ T28] audit: type=1326 audit(1773253458.453:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.630520][ T28] audit: type=1326 audit(1773253458.453:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.656222][ T28] audit: type=1326 audit(1773253458.453:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.2.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f665f6bc799 code=0x7ffc0000 [ 1051.799525][T23660] netlink: 'syz.1.5158': attribute type 4 has an invalid length. [ 1051.811189][ T23] lo speed is unknown, defaulting to 1000 [ 1051.817354][ T23] syz0: Port: 1 Link DOWN [ 1051.824639][T23660] netlink: 'syz.1.5158': attribute type 4 has an invalid length. [ 1051.837345][ T23] lo speed is unknown, defaulting to 1000 [ 1051.843852][ T23] syz0: Port: 1 Link ACTIVE [ 1052.018287][T23674] sctp: [Deprecated]: syz.3.5162 (pid 23674) Use of int in maxseg socket option. [ 1052.018287][T23674] Use struct sctp_assoc_value instead [ 1052.620967][ T7960] IPVS: starting estimator thread 0... [ 1052.727451][T23714] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1052.735600][T23722] netlink: 'syz.4.5176': attribute type 4 has an invalid length. [ 1052.768354][T23722] netlink: 'syz.4.5176': attribute type 4 has an invalid length. [ 1053.261486][T23773] netlink: 'syz.2.5190': attribute type 4 has an invalid length. [ 1053.312310][T23780] netlink: 'syz.2.5190': attribute type 4 has an invalid length. [ 1053.374873][T23783] Process accounting resumed [ 1053.409446][T23790] xt_hashlimit: size too large, truncated to 1048576 [ 1053.755314][T23809] sctp: [Deprecated]: syz.0.5204 (pid 23809) Use of int in maxseg socket option. [ 1053.755314][T23809] Use struct sctp_assoc_value instead [ 1054.258728][T23861] xt_hashlimit: size too large, truncated to 1048576 [ 1054.409443][T23869] sctp: [Deprecated]: syz.4.5219 (pid 23869) Use of int in maxseg socket option. [ 1054.409443][T23869] Use struct sctp_assoc_value instead [ 1055.045311][T23920] xt_hashlimit: size too large, truncated to 1048576 [ 1055.106328][T23921] sctp: [Deprecated]: syz.2.5233 (pid 23921) Use of int in maxseg socket option. [ 1055.106328][T23921] Use struct sctp_assoc_value instead [ 1055.222903][T23921] __nla_validate_parse: 31 callbacks suppressed [ 1055.223167][T23921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5233'. [ 1055.773708][T23956] sctp: [Deprecated]: syz.2.5244 (pid 23956) Use of int in maxseg socket option. [ 1055.773708][T23956] Use struct sctp_assoc_value instead [ 1055.818349][T23956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5244'. [ 1055.828906][T23954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5243'. [ 1055.842562][T23962] xt_hashlimit: size too large, truncated to 1048576 [ 1055.843781][T23954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5243'. [ 1055.900801][T23966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1055.957065][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1056.301742][T23991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5255'. [ 1056.409129][T23992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5253'. [ 1056.475004][T23994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5255'. [ 1057.141348][T24002] sctp: [Deprecated]: syz.0.5258 (pid 24002) Use of int in maxseg socket option. [ 1057.141348][T24002] Use struct sctp_assoc_value instead [ 1057.251823][T24002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5258'. [ 1057.470358][T24024] netlink: 'syz.2.5266': attribute type 12 has an invalid length. [ 1057.505121][T24024] netlink: 'syz.2.5266': attribute type 29 has an invalid length. [ 1058.098057][T24043] sctp: [Deprecated]: syz.1.5273 (pid 24043) Use of int in maxseg socket option. [ 1058.098057][T24043] Use struct sctp_assoc_value instead [ 1058.556367][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 1058.556385][ T28] audit: type=1400 audit(1773253465.663:3192): avc: denied { read } for pid=24053 comm="syz.2.5277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1058.638287][ T28] audit: type=1400 audit(1773253465.743:3193): avc: denied { bind } for pid=24053 comm="syz.2.5277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1058.692875][ T28] audit: type=1400 audit(1773253465.793:3194): avc: denied { write } for pid=24053 comm="syz.2.5277" path="socket:[67844]" dev="sockfs" ino=67844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1058.718955][T24052] sctp: [Deprecated]: syz.1.5287 (pid 24052) Use of int in maxseg socket option. [ 1058.718955][T24052] Use struct sctp_assoc_value instead [ 1058.864338][T24066] netlink: 'syz.1.5281': attribute type 12 has an invalid length. [ 1058.874776][T24067] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1058.884895][T24067] SELinux: failed to load policy [ 1058.942936][T24066] netlink: 'syz.1.5281': attribute type 29 has an invalid length. [ 1059.433359][T24098] sctp: [Deprecated]: syz.2.5293 (pid 24098) Use of int in maxseg socket option. [ 1059.433359][T24098] Use struct sctp_assoc_value instead [ 1059.587071][T24113] SELinux: failed to load policy [ 1059.961845][T24137] sctp: [Deprecated]: syz.2.5307 (pid 24137) Use of int in maxseg socket option. [ 1059.961845][T24137] Use struct sctp_assoc_value instead [ 1060.316762][T24158] __nla_validate_parse: 27 callbacks suppressed [ 1060.316780][T24158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5325'. [ 1060.343076][T24167] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1060.357524][T24167] SELinux: failed to load policy [ 1060.399016][T24158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5325'. [ 1060.602820][T24186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1060.635687][T24188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5334'. [ 1060.645426][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5334'. [ 1060.677511][T24193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1060.827988][T24195] sctp: [Deprecated]: syz.2.5324 (pid 24195) Use of int in maxseg socket option. [ 1060.827988][T24195] Use struct sctp_assoc_value instead [ 1060.869387][T24195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5324'. [ 1061.037113][T24211] sctp: [Deprecated]: syz.2.5345 (pid 24211) Use of int in maxseg socket option. [ 1061.037113][T24211] Use struct sctp_assoc_value instead [ 1061.083111][T24211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5345'. [ 1061.177752][T24223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5339'. [ 1061.187410][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5339'. [ 1061.408543][T24239] sctp: [Deprecated]: syz.3.5347 (pid 24239) Use of int in maxseg socket option. [ 1061.408543][T24239] Use struct sctp_assoc_value instead [ 1065.569939][T24404] 9p: Bad value for 'rfdno' [ 1066.125685][T24416] __nla_validate_parse: 13 callbacks suppressed [ 1066.125707][T24416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1066.460331][T24436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5391'. [ 1066.492641][T24436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5391'. [ 1066.660133][T24453] 9p: Bad value for 'rfdno' [ 1066.865649][T24463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5400'. [ 1066.913917][T24472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5403'. [ 1066.931325][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5403'. [ 1067.257776][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'. [ 1067.277000][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'. [ 1067.292222][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'. [ 1067.306129][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'. [ 1068.969589][ T28] audit: type=1326 audit(1773253476.073:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.074419][ T28] audit: type=1326 audit(1773253476.073:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.105117][T24533] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1069.130030][T24533] SELinux: failed to load policy [ 1069.153598][ T28] audit: type=1326 audit(1773253476.073:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.229240][ T28] audit: type=1326 audit(1773253476.103:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.429228][ T28] audit: type=1326 audit(1773253476.103:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.520960][ T28] audit: type=1326 audit(1773253476.103:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.573611][ T28] audit: type=1326 audit(1773253476.103:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.600907][ T28] audit: type=1326 audit(1773253476.103:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.640232][ T28] audit: type=1326 audit(1773253476.103:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1069.681627][ T28] audit: type=1326 audit(1773253476.103:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.1.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007dac799 code=0x7ffc0000 [ 1070.960693][T24608] netlink: 'syz.2.5450': attribute type 12 has an invalid length. [ 1071.052158][ T4263] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1071.063376][T24608] netlink: 'syz.2.5450': attribute type 12 has an invalid length. [ 1071.073056][ T4263] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1071.113189][ T4263] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1071.164806][ T4263] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1071.684344][T24613] __nla_validate_parse: 15 callbacks suppressed [ 1071.684367][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5451'. [ 1071.781516][T24618] Invalid argument reading file caps for ./file0 [ 1072.011751][T24634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1072.027086][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1072.368788][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1072.382546][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1072.394799][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1072.406885][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1072.849920][T24646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5462'. [ 1072.953652][T24660] netlink: 'syz.1.5467': attribute type 8 has an invalid length. [ 1072.961957][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5467'. [ 1072.981649][T24660] gretap0: entered promiscuous mode [ 1072.992254][T24660] erspan0: entered promiscuous mode [ 1072.999598][T24660] erspan0: left promiscuous mode [ 1073.012127][T24660] gretap0: left promiscuous mode [ 1073.062955][T24656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5476'. [ 1073.313475][T24691] ip6gre1: entered promiscuous mode [ 1073.318843][T24691] ip6gre1: entered allmulticast mode [ 1073.776309][T24716] netlink: 'syz.4.5485': attribute type 8 has an invalid length. [ 1073.787319][T24716] bond0: entered promiscuous mode [ 1073.792799][T24716] bond_slave_0: entered promiscuous mode [ 1073.798820][T24716] bond_slave_1: entered promiscuous mode [ 1073.826072][T24716] gretap0: entered promiscuous mode [ 1073.836386][T24716] erspan0: entered promiscuous mode [ 1073.846643][T24716] hsr1: entered promiscuous mode [ 1074.104089][T24745] sctp: [Deprecated]: syz.4.5496 (pid 24745) Use of int in maxseg socket option. [ 1074.104089][T24745] Use struct sctp_assoc_value instead [ 1075.261935][T24766] netlink: 'syz.2.5504': attribute type 8 has an invalid length. [ 1075.280542][T24766] bond0: entered promiscuous mode [ 1075.286876][T24766] bond_slave_0: entered promiscuous mode [ 1075.308345][T24766] bond_slave_1: entered promiscuous mode [ 1075.318430][T24766] gretap0: entered promiscuous mode [ 1075.319380][T24766] erspan0: entered promiscuous mode [ 1075.322445][T24766] debugfs: 'hsr1' already exists in 'hsr' [ 1075.322466][T24766] Cannot create hsr debugfs directory [ 1075.322480][T24766] hsr1: entered promiscuous mode [ 1075.549809][T24780] netlink: 'syz.2.5508': attribute type 6 has an invalid length. [ 1076.056319][T24816] netlink: 'syz.0.5521': attribute type 6 has an invalid length. [ 1077.219971][T24858] 9p: Bad value for 'rfdno' [ 1077.394964][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1077.395003][ T28] audit: type=1400 audit(1773253484.503:3234): avc: denied { bind } for pid=24869 comm="syz.1.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1077.422163][T24863] __nla_validate_parse: 18 callbacks suppressed [ 1077.422184][T24863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1077.439219][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1077.449236][ T28] audit: type=1400 audit(1773253484.533:3235): avc: denied { listen } for pid=24869 comm="syz.1.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1077.580986][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5540'. [ 1077.632884][T24884] sctp: [Deprecated]: syz.1.5543 (pid 24884) Use of int in maxseg socket option. [ 1077.632884][T24884] Use struct sctp_assoc_value instead [ 1077.678368][T24884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5543'. [ 1078.203672][ T28] audit: type=1400 audit(1773253485.313:3236): avc: denied { bind } for pid=24893 comm="syz.2.5548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1078.379028][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5553'. [ 1078.463160][T24901] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1078.528288][T24917] sctp: [Deprecated]: syz.1.5555 (pid 24917) Use of int in maxseg socket option. [ 1078.528288][T24917] Use struct sctp_assoc_value instead [ 1078.745161][T24921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5557'. [ 1078.906635][T24928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5557'. [ 1079.452721][T24954] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5567'. [ 1079.543424][T24963] sctp: [Deprecated]: syz.4.5569 (pid 24963) Use of int in maxseg socket option. [ 1079.543424][T24963] Use struct sctp_assoc_value instead [ 1079.960996][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5574'. [ 1080.175103][ T4261] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.185887][ T4261] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.194465][ T4261] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.203207][ T4261] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.228605][T24981] 9p: Bad value for 'rfdno' [ 1080.307879][T24987] sctp: [Deprecated]: syz.4.5581 (pid 24987) Use of int in maxseg socket option. [ 1080.307879][T24987] Use struct sctp_assoc_value instead [ 1080.454675][T25005] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1080.546948][T25013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.597954][T25013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.284462][ T28] audit: type=1400 audit(1773253488.393:3237): avc: denied { write } for pid=25026 comm="syz.4.5594" name="file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1081.423565][ T28] audit: type=1400 audit(1773253488.413:3238): avc: denied { open } for pid=25026 comm="syz.4.5594" path="/128/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1081.450406][T25030] sctp: [Deprecated]: syz.2.5595 (pid 25030) Use of int in maxseg socket option. [ 1081.450406][T25030] Use struct sctp_assoc_value instead [ 1081.516093][ T28] audit: type=1400 audit(1773253488.463:3239): avc: denied { ioctl } for pid=25026 comm="syz.4.5594" path="/128/file0" dev="tmpfs" ino=697 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1081.855704][ T28] audit: type=1326 audit(1773253488.953:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25060 comm="syz.2.5606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f665f6bc799 code=0x0 [ 1082.013924][ T4261] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.035107][ T4261] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.059491][ T4261] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.084663][T25072] sctp: [Deprecated]: syz.1.5613 (pid 25072) Use of int in maxseg socket option. [ 1082.084663][T25072] Use struct sctp_assoc_value instead [ 1082.104440][ T4261] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.489914][T25080] sctp: [Deprecated]: syz.1.5625 (pid 25080) Use of int in maxseg socket option. [ 1082.489914][T25080] Use struct sctp_assoc_value instead [ 1082.760183][T25092] __nla_validate_parse: 10 callbacks suppressed [ 1082.760212][T25092] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5620'. [ 1082.916650][T25096] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5621'. [ 1082.968976][T25107] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1083.650796][T25124] sctp: [Deprecated]: syz.3.5631 (pid 25124) Use of int in maxseg socket option. [ 1083.650796][T25124] Use struct sctp_assoc_value instead [ 1083.975964][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5633'. [ 1084.011074][T25130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.105274][T25130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.236497][T25147] xt_hashlimit: size too large, truncated to 1048576 [ 1084.553202][T25166] sctp: [Deprecated]: syz.2.5647 (pid 25166) Use of int in maxseg socket option. [ 1084.553202][T25166] Use struct sctp_assoc_value instead [ 1084.889671][ T28] audit: type=1326 audit(1773253491.993:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25182 comm="syz.0.5653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d548ec799 code=0x0 [ 1085.311652][T25198] lo speed is unknown, defaulting to 1000 [ 1085.479402][T25203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5660'. [ 1085.497009][T25203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5660'. [ 1085.543409][T25206] block device autoloading is deprecated and will be removed. [ 1085.640238][T25221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5670'. [ 1085.654472][T25221] geneve2: entered promiscuous mode [ 1085.763853][T25231] geneve2: entered promiscuous mode [ 1085.782899][T25233] loop2: detected capacity change from 0 to 128 [ 1085.793782][T25234] lo speed is unknown, defaulting to 1000 [ 1085.844098][T25240] block device autoloading is deprecated and will be removed. [ 1085.916854][T25243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5676'. [ 1085.931561][T25243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5676'. [ 1086.066704][T25258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5684'. [ 1086.140951][T25258] geneve2: entered promiscuous mode [ 1086.151461][ T28] audit: type=1326 audit(1773253493.253:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25262 comm="syz.3.5685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd46180c799 code=0x0 [ 1086.216700][T25269] loop2: detected capacity change from 0 to 128 [ 1086.341540][T25272] loop0: detected capacity change from 0 to 512 [ 1086.378082][T25272] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1086.420386][T25272] EXT4-fs (loop0): 1 truncate cleaned up [ 1086.436518][T25272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.537759][T25288] lo speed is unknown, defaulting to 1000 [ 1086.544034][T25281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5694'. [ 1087.064040][T25272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.104270][T25298] 9p: Bad value for 'rfdno' [ 1087.114314][T25297] syzkaller0: entered allmulticast mode [ 1087.188794][T25310] geneve2: entered promiscuous mode [ 1087.197638][ T3910] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.206173][ T3902] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.214864][ T3902] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.256382][ T3902] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.423622][T25325] loop0: detected capacity change from 0 to 512 [ 1087.456116][T25325] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1087.504060][T25325] EXT4-fs (loop0): 1 truncate cleaned up [ 1087.521914][T25325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.560080][T25344] geneve3: entered promiscuous mode [ 1087.584527][ T4267] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.600930][ T4267] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.630406][ T4267] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.667534][ T4267] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.819947][T25360] __nla_validate_parse: 6 callbacks suppressed [ 1087.819965][T25360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5721'. [ 1087.836459][T25360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5721'. [ 1088.207383][T25325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.264782][T25389] loop2: detected capacity change from 0 to 128 [ 1088.296097][T25391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5732'. [ 1088.396724][T25397] sctp: [Deprecated]: syz.0.5735 (pid 25397) Use of int in maxseg socket option. [ 1088.396724][T25397] Use struct sctp_assoc_value instead [ 1088.416699][T25403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5736'. [ 1088.426293][T25403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5736'. [ 1088.437836][T25393] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5733'. [ 1091.518861][T25418] loop2: detected capacity change from 0 to 512 [ 1092.361012][T25443] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5748'. [ 1092.373125][T25448] sctp: [Deprecated]: syz.3.5750 (pid 25448) Use of int in maxseg socket option. [ 1092.373125][T25448] Use struct sctp_assoc_value instead [ 1092.454653][T25454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5751'. [ 1092.464361][T25454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5751'. [ 1092.508109][ T28] audit: type=1400 audit(1773253499.613:3243): avc: denied { ioctl } for pid=25461 comm="syz.3.5755" path="socket:[70935]" dev="sockfs" ino=70935 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1092.758667][T25479] sctp: [Deprecated]: syz.3.5764 (pid 25479) Use of int in maxseg socket option. [ 1092.758667][T25479] Use struct sctp_assoc_value instead [ 1092.794148][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5765'. [ 1093.102305][T25502] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.120207][T25502] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.141421][T25508] syzkaller0: entered promiscuous mode [ 1093.163239][ T28] audit: type=1400 audit(1773253500.273:3244): avc: denied { write } for pid=25499 comm="syz.2.5773" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1093.164056][T25502] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.264605][T25510] sctp: [Deprecated]: syz.1.5777 (pid 25510) Use of int in maxseg socket option. [ 1093.264605][T25510] Use struct sctp_assoc_value instead [ 1093.279494][T25502] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.341597][T25502] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.372946][T25502] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.457349][T25502] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.474210][T25502] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.488230][T25539] __nla_validate_parse: 3 callbacks suppressed [ 1093.488248][T25539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5790'. [ 1093.559651][ T4261] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.572616][ T4261] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.592401][T25546] sctp: [Deprecated]: syz.1.5792 (pid 25546) Use of int in maxseg socket option. [ 1093.592401][T25546] Use struct sctp_assoc_value instead [ 1093.609129][ T4261] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.617604][ T4261] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.628928][T25550] loop2: detected capacity change from 0 to 128 [ 1093.641751][ T4261] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.657856][ T4261] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.696766][ T4261] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.705590][ T4261] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.773960][T25558] loop2: detected capacity change from 0 to 512 [ 1093.796814][T25558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1093.815064][T25558] EXT4-fs (loop2): 1 truncate cleaned up [ 1093.833652][T25558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.862655][T22819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.998228][T25588] loop2: detected capacity change from 0 to 128 [ 1094.084671][T25590] sctp: [Deprecated]: syz.4.5807 (pid 25590) Use of int in maxseg socket option. [ 1094.084671][T25590] Use struct sctp_assoc_value instead [ 1094.277630][T25617] loop0: detected capacity change from 0 to 128 [ 1094.387662][T25623] sctp: [Deprecated]: syz.2.5822 (pid 25623) Use of int in maxseg socket option. [ 1094.387662][T25623] Use struct sctp_assoc_value instead [ 1094.524210][T25635] lo speed is unknown, defaulting to 1000 [ 1094.620228][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5830'. [ 1094.762166][T25647] loop2: detected capacity change from 0 to 128 [ 1095.740499][T25664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1095.960316][ T28] audit: type=1400 audit(1773253503.063:3245): avc: denied { mount } for pid=25675 comm="syz.3.5843" name="/" dev="hugetlbfs" ino=72473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1096.593856][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5855'. [ 1096.612786][T25700] syzkaller0: refused to change device tx_queue_len [ 1096.670506][T25709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5857'. [ 1096.739960][T25715] netlink: 'syz.0.5860': attribute type 10 has an invalid length. [ 1096.810263][T25715] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1097.034117][T25730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5866'. [ 1097.086117][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5866'. [ 1097.807150][T25751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5874'. [ 1097.918858][T25759] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5878'. [ 1098.224746][T25782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1098.990048][T25793] syzkaller0: refused to change device tx_queue_len [ 1099.168532][T25798] sctp: [Deprecated]: syz.3.5893 (pid 25798) Use of int in maxseg socket option. [ 1099.168532][T25798] Use struct sctp_assoc_value instead [ 1099.235194][T25807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5893'. [ 1099.893399][T25842] sctp: [Deprecated]: syz.2.5910 (pid 25842) Use of int in maxseg socket option. [ 1099.893399][T25842] Use struct sctp_assoc_value instead [ 1099.922894][T25842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5910'. [ 1100.238899][T25860] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1100.261120][T25860] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1100.285940][T25860] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.332974][T25860] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1100.343591][T25860] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1100.354034][T25860] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.377925][T25868] loop0: detected capacity change from 0 to 256 [ 1100.426700][T25860] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1100.518244][T25860] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1100.533051][T25860] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.545007][T25890] loop2: detected capacity change from 0 to 128 [ 1100.580533][T25890] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1100.602134][T25890] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.602248][T25860] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1100.671816][T25860] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1100.682389][T25860] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.694852][T22819] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1100.858303][ T4263] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1100.867025][ T4263] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1100.876170][ T4263] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.892709][ T3910] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1100.901410][ T3910] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1100.910295][T25913] sctp: [Deprecated]: syz.0.5933 (pid 25913) Use of int in maxseg socket option. [ 1100.910295][T25913] Use struct sctp_assoc_value instead [ 1101.080578][ T3910] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.140080][T25913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5933'. [ 1101.279160][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5935'. [ 1101.335872][T25921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5935'. [ 1101.353545][ T3910] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.383773][ T3910] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1101.416163][ T3910] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.450419][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5935'. [ 1101.486769][ T3910] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.504493][T25921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5935'. [ 1101.553833][ T3910] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1101.618962][ T3910] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.746018][T25927] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1102.324251][T25959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5949'. [ 1102.360576][T25959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5949'. [ 1102.649209][T25983] loop0: detected capacity change from 0 to 128 [ 1102.891237][ T4263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.911106][ T4263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.990531][T25992] sctp: [Deprecated]: syz.0.5966 (pid 25992) Use of int in maxseg socket option. [ 1102.990531][T25992] Use struct sctp_assoc_value instead [ 1102.990637][ T4263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.990680][ T4263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.085940][ T4263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.097501][ T4263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.168969][T25994] lo speed is unknown, defaulting to 1000 [ 1103.181137][ T4263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.191695][ T4263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.204383][T26012] loop0: detected capacity change from 0 to 128 [ 1103.372781][T25994] chnl_net:caif_netlink_parms(): no params data found [ 1103.426834][ T4263] bridge_slave_1: left allmulticast mode [ 1103.439400][ T4263] bridge_slave_1: left promiscuous mode [ 1103.445671][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.454089][ T4263] bridge_slave_0: left allmulticast mode [ 1103.459980][ T4263] bridge_slave_0: left promiscuous mode [ 1103.466138][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.467617][ T4263] erspan0 (unregistering): left promiscuous mode [ 1104.476711][ T4263] gretap0 (unregistering): left promiscuous mode [ 1104.487623][ T4263] team0: Port device gretap1 removed [ 1104.543765][ T4263] bond0 (unregistering): left promiscuous mode [ 1104.550201][ T4263] bond_slave_0: left promiscuous mode [ 1104.556141][ T4263] bond_slave_1: left promiscuous mode [ 1104.564730][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.575776][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.586269][ T4263] bond0 (unregistering): Released all slaves [ 1104.613965][T25994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.621790][T25994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.629102][T25994] bridge_slave_0: entered allmulticast mode [ 1104.638232][T25994] bridge_slave_0: entered promiscuous mode [ 1104.646951][T25994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.654565][T25994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.661938][T25994] bridge_slave_1: entered allmulticast mode [ 1104.668618][T25994] bridge_slave_1: entered promiscuous mode [ 1104.687437][T25994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.698251][T25994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.719798][T25994] team0: Port device team_slave_0 added [ 1104.727152][T25994] team0: Port device team_slave_1 added [ 1104.746335][T25994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.753508][T25994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.782161][T25994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.794323][T25994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.801704][T25994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.829560][T25994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.861083][T25994] hsr_slave_0: entered promiscuous mode [ 1104.867602][T25994] hsr_slave_1: entered promiscuous mode [ 1104.874231][T25994] debugfs: 'hsr0' already exists in 'hsr' [ 1104.880341][T25994] Cannot create hsr debugfs directory [ 1105.143699][T25994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1105.153786][T25994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1105.163417][T25994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1105.173529][T25994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1105.190335][T25994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.197757][T25994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.205678][T25994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.212849][T25994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.232448][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.242849][T26070] loop0: detected capacity change from 0 to 512 [ 1105.249547][T26070] EXT4-fs: Ignoring removed nobh option [ 1105.259369][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.273568][T26070] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1105.285408][T26070] EXT4-fs (loop0): 1 truncate cleaned up [ 1105.299302][T26070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.322276][ T4263] hsr_slave_0: left promiscuous mode [ 1105.341497][ T4263] hsr_slave_1: left promiscuous mode [ 1105.349111][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.358350][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.369331][ T4263] veth1_macvtap: left promiscuous mode [ 1105.378362][ T4263] veth0_macvtap: left promiscuous mode [ 1105.389527][T26081] __nla_validate_parse: 4 callbacks suppressed [ 1105.389548][T26081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1105.391820][ T4263] veth1_vlan: left promiscuous mode [ 1105.415481][ T4263] veth0_vlan: left promiscuous mode [ 1105.481848][T22639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.514058][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1105.524591][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1105.565771][T26081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1105.613945][T26089] loop0: detected capacity change from 0 to 1024 [ 1105.637579][T26089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.651935][T25994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.670433][T26089] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.5984: Allocating blocks 449-513 which overlap fs metadata [ 1105.695218][T25994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.709687][ T2212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.716916][ T2212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.753934][ T2212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.761592][ T2212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.770102][T22639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.824274][T26100] sctp: [Deprecated]: syz.3.5986 (pid 26100) Use of int in maxseg socket option. [ 1105.824274][T26100] Use struct sctp_assoc_value instead [ 1105.856313][T25994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1105.874255][T26116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5986'. [ 1105.890616][ T4263] IPVS: stop unused estimator thread 0... [ 1105.891137][T26115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5989'. [ 1105.935302][T26115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5989'. [ 1106.049808][T25994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.244022][ T28] audit: type=1400 audit(1773253513.353:3246): avc: denied { append } for pid=26161 comm="syz.0.6007" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1106.364419][ T28] audit: type=1400 audit(1773253513.473:3247): avc: denied { listen } for pid=26178 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1106.388533][ T28] audit: type=1400 audit(1773253513.493:3248): avc: denied { accept } for pid=26178 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1106.410263][T25994] veth0_vlan: entered promiscuous mode [ 1106.426690][T25994] veth1_vlan: entered promiscuous mode [ 1106.449441][T25994] veth0_macvtap: entered promiscuous mode [ 1106.454172][T25994] veth1_macvtap: entered promiscuous mode [ 1106.471710][T25994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.497146][T25994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.509110][ T3910] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.509175][ T3910] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.509212][ T3910] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.509339][ T3910] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.656925][T26188] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6001'. [ 1106.697318][T26211] loop7: detected capacity change from 0 to 16384 [ 1106.727130][T26215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6006'. [ 1106.743454][T26215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6006'. [ 1106.830962][T26219] loop7: detected capacity change from 16384 to 0 [ 1106.883180][ C0] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 3 [ 1106.896783][ T9090] IPVS: starting estimator thread 0... [ 1106.991152][T26233] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1107.014729][ T28] audit: type=1400 audit(1773253514.113:3249): avc: denied { read } for pid=26242 comm="syz.7.6011" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1107.078427][ T28] audit: type=1400 audit(1773253514.113:3250): avc: denied { open } for pid=26242 comm="syz.7.6011" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1107.106849][ T28] audit: type=1400 audit(1773253514.113:3251): avc: denied { ioctl } for pid=26242 comm="syz.7.6011" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1107.345326][T26284] loop7: detected capacity change from 0 to 1024 [ 1107.406055][T26284] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1107.441334][T26284] System zones: 0-1, 3-36 [ 1107.448378][T26284] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.6020: bad orphan inode 134217728 [ 1107.463595][T26284] loop7: lost filesystem error report for type 5 error -117 [ 1107.466332][T26284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.470352][T26298] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6021'. [ 1107.618146][T26305] lo speed is unknown, defaulting to 1000 [ 1107.862035][T25994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.028915][T26346] loop7: detected capacity change from 0 to 512 [ 1108.037890][T26346] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1108.096331][T26354] dvmrp0: entered allmulticast mode [ 1108.104294][T26346] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.6034: bad orphan inode 13 [ 1108.136684][T26346] loop7: lost filesystem error report for type 5 error -117 [ 1108.136872][T26346] ext4_test_bit(bit=12, block=18) = 1 [ 1108.140930][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1108.155420][T26346] is_bad_inode(inode)=0 [ 1108.156215][ C1] EXT4-fs (loop7): last error at time 1773253515: ext4_orphan_get:1417 [ 1108.180999][T26346] NEXT_ORPHAN(inode)=0 [ 1108.191885][T26346] max_ino=32 [ 1108.196612][T26346] i_nlink=1 [ 1108.206975][T26346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1108.249747][T26346] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1108.273383][T26346] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6034: bg 0: block 248: padding at end of block bitmap is not set [ 1108.290171][T26346] Quota error (device loop7): write_blk: dquota write failed [ 1108.298753][T26346] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1108.309704][T26346] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.6034: Failed to acquire dquot type 1 [ 1108.343302][T25994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1108.353563][ T4267] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5 [ 1108.379684][ T4267] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:36: Failed to release dquot type 1 [ 1108.404199][ T4267] loop7: lost filesystem error report for type 5 error -117 [ 1108.477368][T26384] lo speed is unknown, defaulting to 1000 [ 1108.664316][T26386] lo speed is unknown, defaulting to 1000 [ 1108.797885][ T28] audit: type=1400 audit(1773253515.903:3252): avc: denied { create } for pid=26418 comm="syz.0.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1108.960452][T26386] chnl_net:caif_netlink_parms(): no params data found [ 1109.083571][T26386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.101036][T26386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.108767][T26386] bridge_slave_0: entered allmulticast mode [ 1109.138789][T26386] bridge_slave_0: entered promiscuous mode [ 1109.148494][T26386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.155837][T26386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.170476][T26386] bridge_slave_1: entered allmulticast mode [ 1109.177949][T26386] bridge_slave_1: entered promiscuous mode [ 1109.204114][T26386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.219575][T26386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.249417][T26386] team0: Port device team_slave_0 added [ 1109.271730][T26386] team0: Port device team_slave_1 added [ 1109.306395][T26386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.328739][T26386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.378208][T26386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.390723][T26386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.399628][T26386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.429965][T26469] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6057'. [ 1109.440248][T26386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.524816][T26386] hsr_slave_0: entered promiscuous mode [ 1109.551709][T26386] hsr_slave_1: entered promiscuous mode [ 1109.595106][T26386] debugfs: 'hsr0' already exists in 'hsr' [ 1109.605427][T26386] Cannot create hsr debugfs directory [ 1110.573710][T26475] __nla_validate_parse: 1 callbacks suppressed [ 1110.573729][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1110.589878][T26475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1110.606992][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1110.615954][T26475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1110.760667][T26495] loop7: detected capacity change from 0 to 16384 [ 1111.239215][T26386] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1111.308591][T26386] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1111.347417][T26386] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1111.360987][T26506] loop7: detected capacity change from 16384 to 0 [ 1111.374584][T26386] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1111.546903][T26386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.575926][T26386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.587803][ T2212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.595484][ T2212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.627192][T26386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1111.638243][T26386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1111.651846][ T2212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.659135][ T2212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.728125][T26386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.043558][T26601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6075'. [ 1112.507634][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1112.507718][ T28] audit: type=1400 audit(1773253519.613:3254): avc: denied { relabelfrom } for pid=26616 comm="syz.7.6078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1112.570698][T26386] veth0_vlan: entered promiscuous mode [ 1112.571248][ T28] audit: type=1400 audit(1773253519.613:3255): avc: denied { relabelto } for pid=26616 comm="syz.7.6078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1112.632134][T26386] veth1_vlan: entered promiscuous mode [ 1112.665145][ T28] audit: type=1400 audit(1773253519.773:3256): avc: denied { map } for pid=26632 comm="syz.0.6081" path="socket:[75982]" dev="sockfs" ino=75982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1112.709777][T26386] veth0_macvtap: entered promiscuous mode [ 1112.735650][T26386] veth1_macvtap: entered promiscuous mode [ 1112.782775][T26386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.821588][T26386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.910100][T26655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1112.919992][T26655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1112.934318][ T4263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.947175][ T4263] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.962708][T26655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1112.984481][T26655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1113.006685][ T4263] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.038648][ T4263] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.179538][T26682] gretap2: entered promiscuous mode [ 1113.246239][T26691] loop0: detected capacity change from 0 to 1024 [ 1113.263291][T26691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1113.274389][T26691] System zones: 0-1, 3-36 [ 1113.280509][T26691] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.6093: bad orphan inode 134217728 [ 1113.300651][T26691] loop0: lost filesystem error report for type 5 error -117 [ 1113.300851][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1113.302091][T26691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1113.308227][ C1] EXT4-fs (loop0): initial error at time 1773253520: ext4_orphan_get:1417 [ 1113.335985][ C1] EXT4-fs (loop0): last error at time 1773253520: ext4_orphan_get:1417 [ 1113.615589][T22639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.673711][T26738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6096'. [ 1114.108263][T21977] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.140067][T21977] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.194826][T21977] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.206373][T21977] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.380539][ T4267] Bluetooth: hci0: Frame reassembly failed (-84) [ 1114.397745][ T2212] Bluetooth: hci1: Frame reassembly failed (-84) [ 1114.403408][ T28] audit: type=1400 audit(1773253521.503:3257): avc: denied { ioctl } for pid=26818 comm="syz.7.6105" path="socket:[76151]" dev="sockfs" ino=76151 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1114.577064][ T28] audit: type=1400 audit(1773253521.683:3258): avc: denied { ioctl } for pid=26832 comm="syz.3.6109" path="socket:[76160]" dev="sockfs" ino=76160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1115.002875][T26886] netlink: 'syz.0.6114': attribute type 13 has an invalid length. [ 1115.252856][T26911] loop0: detected capacity change from 0 to 512 [ 1115.262019][T26911] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1115.277201][T26911] EXT4-fs error (device loop0): ext4_init_orphan_info:583: comm syz.0.6123: inode #0: comm syz.0.6123: iget: illegal inode # [ 1115.298558][T26911] loop0: lost filesystem error report for type 5 error -117 [ 1115.300913][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1115.316372][ C1] EXT4-fs (loop0): initial error at time 1773253522: ext4_init_orphan_info:583 [ 1115.326392][ C1] EXT4-fs (loop0): last error at time 1773253522: ext4_init_orphan_info:583 [ 1115.335986][T26911] EXT4-fs (loop0): Remounting filesystem read-only [ 1115.336007][T26911] EXT4-fs (loop0): get orphan inode failed [ 1115.336220][T26911] EXT4-fs (loop0): mount failed [ 1115.421241][ T28] audit: type=1400 audit(1773253522.473:3259): avc: denied { mounton } for pid=26910 comm="syz.0.6123" path="/190/file0" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1115.648304][ T28] audit: type=1400 audit(1773253522.753:3260): avc: denied { unmount } for pid=26938 comm="syz.1.6133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1115.691252][T26944] loop7: detected capacity change from 0 to 16384 [ 1115.710254][T26946] __nla_validate_parse: 12 callbacks suppressed [ 1115.710273][T26946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6135'. [ 1115.726126][T26944] loop0: detected capacity change from 0 to 128 [ 1115.914335][T26929] loop6: detected capacity change from 0 to 1764 [ 1115.933315][ T28] audit: type=1400 audit(1773253523.043:3261): avc: denied { mount } for pid=26928 comm="syz.6.6130" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1115.990990][T26953] loop7: detected capacity change from 16384 to 0 [ 1116.035384][ T28] audit: type=1400 audit(1773253523.143:3262): avc: denied { unmount } for pid=26386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1116.128716][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1116.431408][T26994] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1116.449850][T26994] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1116.451700][T26823] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1116.459492][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1116.465356][T26825] Bluetooth: hci1: command 0x1003 tx timeout [ 1117.103058][T27023] loop6: detected capacity change from 0 to 128 [ 1117.265680][T27033] loop6: detected capacity change from 0 to 128 [ 1117.318656][T27035] lo speed is unknown, defaulting to 1000 [ 1117.381862][T26820] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1117.408073][ T8539] IPVS: starting estimator thread 0... [ 1117.505319][T27041] IPVS: using max 1824 ests per chain, 91200 per kthread [ 1117.653165][T27060] lo speed is unknown, defaulting to 1000 [ 1117.803434][T27069] loop6: detected capacity change from 0 to 1024 [ 1117.826669][T27069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1117.835550][T27069] System zones: 0-1, 3-36 [ 1117.840495][T27069] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.6183: bad orphan inode 134217728 [ 1117.851781][T27069] loop6: lost filesystem error report for type 5 error -117 [ 1117.852262][T27069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.971372][T27077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1117.990476][T27077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1118.048110][T27086] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 1118.055657][T27086] SELinux: failed to load policy [ 1118.103253][T27093] netlink: 'syz.3.6190': attribute type 1 has an invalid length. [ 1118.127089][T27093] netlink: 'syz.3.6190': attribute type 4 has an invalid length. [ 1118.149554][T27093] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6190'. [ 1118.177559][T27093] netlink: 'syz.3.6190': attribute type 1 has an invalid length. [ 1118.201034][T27093] netlink: 'syz.3.6190': attribute type 4 has an invalid length. [ 1118.229646][T27093] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6190'. [ 1118.284385][T27105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6197'. [ 1118.314504][T27107] netlink: 'syz.1.6199': attribute type 13 has an invalid length. [ 1118.346117][T26386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.424729][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1119.499088][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1119.687767][T27165] bridge_slave_1: left allmulticast mode [ 1119.695934][T27165] bridge_slave_1: left promiscuous mode [ 1119.702049][T27165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.714204][T27165] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1120.408835][ T28] audit: type=1400 audit(1773253783.512:3263): avc: denied { read } for pid=27201 comm="syz.0.6231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1120.483968][ T28] audit: type=1400 audit(1773253783.592:3264): avc: denied { bind } for pid=27204 comm="syz.1.6232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1121.486740][T27235] loop0: detected capacity change from 0 to 512 [ 1121.528108][T27235] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1121.621926][T27235] EXT4-fs (loop0): 1 truncate cleaned up [ 1121.644766][T27235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.741984][ T28] audit: type=1400 audit(1773253784.852:3265): avc: denied { bind } for pid=27256 comm="syz.7.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1122.265855][T27230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.418891][T27289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1122.439673][T27287] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 1122.447914][T27287] SELinux: failed to load policy [ 1122.454479][T27289] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1122.469170][T27289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1122.478851][T27289] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1122.537316][T27302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6269'. [ 1122.537337][T27301] loop7: detected capacity change from 0 to 512 [ 1122.558793][T27301] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1122.572592][T27301] EXT4-fs (loop7): 1 orphan inode deleted [ 1122.578413][T27301] EXT4-fs (loop7): 1 truncate cleaned up [ 1122.585127][T27301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.600001][T27301] EXT4-fs (loop7): shut down requested (1) [ 1122.619582][T25994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.874122][T27319] loop7: detected capacity change from 0 to 8192 [ 1122.881828][T27319] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1123.093223][ T28] audit: type=1400 audit(1773253786.202:3266): avc: denied { write } for pid=27326 comm="syz.1.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1123.273391][T27333] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1123.289602][T27333] SELinux: failed to load policy [ 1123.558575][T27351] loop6: detected capacity change from 0 to 256 [ 1123.594543][T27351] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1123.605456][T27347] loop0: detected capacity change from 0 to 8192 [ 1123.628585][T27347] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1123.722139][T27356] lo speed is unknown, defaulting to 1000 [ 1123.791032][T20067] Process accounting resumed [ 1123.795958][T20067] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 1123.804817][T20067] FAT-fs (loop6): Filesystem has been set read-only [ 1123.891461][T27367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6293'. [ 1124.232825][T27392] SELinux: ebitmap start bit (32768) is beyond the end of the bitmap (1088) [ 1124.251735][T27392] SELinux: failed to load policy [ 1125.040945][T27408] l2tp_ppp: sess 2/0: no socket in recv [ 1125.953448][T27438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1125.991374][T27438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1126.015920][ T28] audit: type=1400 audit(1773253789.122:3267): avc: denied { setopt } for pid=27443 comm="syz.3.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1126.122393][T27449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=27449 comm=syz.6.6315 [ 1126.150673][T27449] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6315'. [ 1126.350650][T27452] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6316'. [ 1126.526139][T27476] xt_hashlimit: size too large, truncated to 1048576 [ 1126.568475][ T28] audit: type=1400 audit(1773253789.672:3268): avc: denied { mount } for pid=27480 comm="syz.3.6321" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1126.602672][T27481] geneve3: entered promiscuous mode [ 1126.617729][ T4263] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1126.640974][ T4263] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1126.673320][ T4263] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1126.702837][ T4263] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1128.309621][T27568] xt_hashlimit: size too large, truncated to 1048576 [ 1128.791589][T27588] __nla_validate_parse: 2 callbacks suppressed [ 1128.791610][T27588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6347'. [ 1128.840609][T27588] gretap0: entered promiscuous mode [ 1128.846535][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6347'. [ 1128.871024][T27588] macvtap1: entered promiscuous mode [ 1128.876769][T27588] macvtap1: entered allmulticast mode [ 1128.901151][T27588] gretap0: entered allmulticast mode [ 1128.932646][T27590] gretap0: left allmulticast mode [ 1128.943928][T27590] gretap0: left promiscuous mode [ 1129.096846][T27602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1129.107011][ T28] audit: type=1400 audit(1773253792.212:3269): avc: denied { unmount } for pid=27604 comm="syz.0.6353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1129.143342][T27608] loop7: detected capacity change from 0 to 1024 [ 1129.192077][T27608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.246891][ T28] audit: type=1400 audit(1773253792.352:3270): avc: denied { setattr } for pid=27606 comm="syz.7.6354" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1129.342302][T25994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.617541][T27633] loop7: detected capacity change from 0 to 512 [ 1129.635222][T27633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.658394][T27633] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.833802][T27630] lo speed is unknown, defaulting to 1000 [ 1129.961226][T27630] chnl_net:caif_netlink_parms(): no params data found [ 1130.038550][T27630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.045871][T27630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.053415][T27630] bridge_slave_0: entered allmulticast mode [ 1130.060332][T27630] bridge_slave_0: entered promiscuous mode [ 1130.067650][T27630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.075157][T27630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.082684][T27630] bridge_slave_1: entered allmulticast mode [ 1130.089340][T27630] bridge_slave_1: entered promiscuous mode [ 1130.110754][T27630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.121763][T27630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.143308][T27630] team0: Port device team_slave_0 added [ 1130.150152][T27630] team0: Port device team_slave_1 added [ 1130.168332][T27630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.175608][T27630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.202008][T27630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.213726][T27630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.221104][T27630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.251245][T27630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.283874][T27649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6366'. [ 1130.329753][T27630] hsr_slave_0: entered promiscuous mode [ 1130.341713][T27630] hsr_slave_1: entered promiscuous mode [ 1130.351543][T27630] debugfs: 'hsr0' already exists in 'hsr' [ 1130.358241][T27630] Cannot create hsr debugfs directory [ 1130.438965][T27656] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6368'. [ 1130.489054][T25994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.112002][T27689] loop7: detected capacity change from 0 to 128 [ 1131.213168][T27630] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1131.250901][ T28] audit: type=1400 audit(1773253794.302:3271): avc: denied { mounton } for pid=27688 comm="syz.7.6374" path="/file0" dev="ramfs" ino=78512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1131.310054][T27630] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1131.389928][T27630] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1131.489207][T27630] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1131.577194][T27630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.584344][T27630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.591859][T27630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.599247][T27630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.793618][ T2212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.809424][T27709] loop7: detected capacity change from 0 to 512 [ 1131.820701][ T2212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.894604][T27709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.927764][T27630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.976566][T27630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.991010][T27709] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.019570][ T2212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.026835][ T2212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.048306][T27709] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1132.101543][ T2212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.108680][ T2212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.395221][T25994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.507841][T27630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.557459][ T28] audit: type=1400 audit(1773253795.662:3272): avc: denied { write } for pid=27739 comm="syz.7.6378" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1132.781811][T27762] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6381'. [ 1132.883425][T27630] veth0_vlan: entered promiscuous mode [ 1132.908941][T27630] veth1_vlan: entered promiscuous mode [ 1132.925209][T27784] lo speed is unknown, defaulting to 1000 [ 1132.977107][T27630] veth0_macvtap: entered promiscuous mode [ 1132.998670][T27787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6385'. [ 1133.015471][T27630] veth1_macvtap: entered promiscuous mode [ 1133.049838][T27630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.083738][T27630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.111787][ T4263] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.145058][ T4263] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.337685][ T4263] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.389790][ T4263] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.636475][ T28] audit: type=1400 audit(1773253796.742:3273): avc: denied { watch } for pid=27818 comm="syz.8.6393" path="/proc/4/task/5/ns" dev="proc" ino=78700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1133.823517][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6396'. [ 1133.841767][T27841] bridge_slave_0: left allmulticast mode [ 1133.863681][T27841] bridge_slave_0: left promiscuous mode [ 1133.877594][T27841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.045014][T27869] lo speed is unknown, defaulting to 1000 [ 1134.128092][T27873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6401'. [ 1134.282975][T27892] xt_hashlimit: size too large, truncated to 1048576 [ 1134.358852][T27903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6407'. [ 1134.456328][T27903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6407'. [ 1134.570637][T27924] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6408'. [ 1134.737820][T27937] loop7: detected capacity change from 0 to 128 [ 1134.768723][T27937] syz.7.6412: attempt to access beyond end of device [ 1134.768723][T27937] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1134.817458][T27937] syz.7.6412: attempt to access beyond end of device [ 1134.817458][T27937] loop7: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 1134.870932][T27937] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 1134.889752][T27937] syz.7.6412: attempt to access beyond end of device [ 1134.889752][T27937] loop7: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 1134.931248][T27937] Buffer I/O error on dev loop7, logical block 70, lost async page write [ 1134.943575][T27937] syz.7.6412: attempt to access beyond end of device [ 1134.943575][T27937] loop7: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 1134.990948][T27937] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 1135.011656][T27937] syz.7.6412: attempt to access beyond end of device [ 1135.011656][T27937] loop7: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 1135.048349][T27937] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 1135.072809][T27937] syz.7.6412: attempt to access beyond end of device [ 1135.072809][T27937] loop7: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 1135.087017][T27949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6415'. [ 1135.118319][T27937] Buffer I/O error on dev loop7, logical block 70, lost async page write [ 1135.146547][T27937] syz.7.6412: attempt to access beyond end of device [ 1135.146547][T27937] loop7: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 1135.160886][T27954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6415'. [ 1135.190564][T27937] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 1135.375462][T27976] xt_hashlimit: size too large, truncated to 1048576 [ 1136.321345][T28019] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6424'. [ 1136.503757][T28032] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6428'. [ 1136.538503][T28032] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6428'. [ 1139.614934][T28040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1139.736511][T28104] __nla_validate_parse: 3 callbacks suppressed [ 1139.736591][T28104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6451'. [ 1139.760582][T28106] loop7: detected capacity change from 0 to 256 [ 1139.773377][T28104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6451'. [ 1139.790098][T28106] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1139.826885][ T9090] lo speed is unknown, defaulting to 1000 [ 1139.833170][ T9090] syz0: Port: 1 Link DOWN [ 1139.837782][ T4263] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.847576][ T4263] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1139.874213][ T4263] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.899926][ T4263] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.915343][ T4263] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1139.930936][ T4263] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.948379][ T4263] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.970413][ T4263] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1139.981009][ T9090] Process accounting resumed [ 1139.985786][ T9090] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 1140.000922][ T9090] FAT-fs (loop7): Filesystem has been set read-only [ 1140.007976][ T4263] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.084493][ T4263] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1140.111587][ T4263] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1140.141247][ T4263] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.350911][ T28] audit: type=1400 audit(1773253803.452:3274): avc: denied { getopt } for pid=28126 comm="syz.7.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1140.846057][T28144] xt_hashlimit: size too large, truncated to 1048576 [ 1141.210614][T28165] netlink: 'syz.6.6469': attribute type 4 has an invalid length. [ 1141.222695][T28165] netlink: 'syz.6.6469': attribute type 4 has an invalid length. [ 1141.471766][T28176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6475'. [ 1141.483457][T28176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6475'. [ 1141.917744][ T28] audit: type=1400 audit(1773253805.012:3275): avc: denied { create } for pid=28187 comm="syz.1.6481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1142.118392][ T28] audit: type=1400 audit(1773253805.022:3276): avc: denied { bind } for pid=28187 comm="syz.1.6481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1142.369366][ T28] audit: type=1400 audit(1773253805.022:3277): avc: denied { listen } for pid=28187 comm="syz.1.6481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1142.524958][ T28] audit: type=1400 audit(1773253805.022:3278): avc: denied { connect } for pid=28187 comm="syz.1.6481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1143.425972][ T28] audit: type=1400 audit(1773253805.022:3279): avc: denied { accept } for pid=28187 comm="syz.1.6481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1143.525913][ T28] audit: type=1400 audit(1773253805.022:3280): avc: denied { write } for pid=28187 comm="syz.1.6481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1143.727339][T28218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1143.766419][T28218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1143.823960][ T28] audit: type=1400 audit(1773253806.922:3281): avc: denied { read } for pid=28219 comm="syz.7.6492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1144.011580][T28230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6496'. [ 1144.035765][T28230] bond4: entered promiscuous mode [ 1144.267085][ T28] audit: type=1400 audit(1773253807.372:3282): avc: denied { create } for pid=28250 comm="syz.7.6504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1144.342363][T28259] tipc: Failed to remove unknown binding: 66,0,0/0:1801013386/1801013387 [ 1144.433738][T28268] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6507'. [ 1144.465602][T28268] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6507'. [ 1144.857728][T28274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6511'. [ 1144.874826][T28274] bond1: entered promiscuous mode [ 1146.304128][T28318] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6525'. [ 1146.344139][T28318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6525'. [ 1147.146555][T28365] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6544'. [ 1147.248049][T28373] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6547'. [ 1147.264300][T28373] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6547'. [ 1147.491011][T28404] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6557'. [ 1147.514311][T28394] ================================================================== [ 1147.522529][T28394] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 1147.530060][T28394] [ 1147.532401][T28394] write to 0xffffc90001387e18 of 8 bytes by task 28400 on cpu 0: [ 1147.540310][T28394] shmem_fallocate+0x724/0x920 [ 1147.545099][T28394] vfs_fallocate+0x3b6/0x450 [ 1147.549748][T28394] __x64_sys_fallocate+0x7a/0xd0 [ 1147.554793][T28394] x64_sys_call+0x298e/0x3020 [ 1147.559514][T28394] do_syscall_64+0x12c/0x370 [ 1147.564398][T28394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.570329][T28394] [ 1147.572699][T28394] read to 0xffffc90001387e18 of 8 bytes by task 28394 on cpu 1: [ 1147.580450][T28394] shmem_writeout+0x2c1/0x920 [ 1147.585391][T28394] shrink_folio_list+0x1f1f/0x2820 [ 1147.590540][T28394] evict_folios+0x2a60/0x35c0 [ 1147.595237][T28394] try_to_shrink_lruvec+0x81b/0xbf0 [ 1147.600468][T28394] shrink_lruvec+0x255/0x1c60 [ 1147.605354][T28394] shrink_node+0x67a/0x2130 [ 1147.609888][T28394] do_try_to_free_pages+0x408/0xc80 [ 1147.615551][T28394] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 1147.621662][T28394] try_charge_memcg+0x37e/0xa10 [ 1147.626558][T28394] obj_cgroup_charge_pages+0x23/0xc0 [ 1147.631982][T28394] __memcg_kmem_charge_page+0x9e/0x170 [ 1147.637567][T28394] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1147.643588][T28394] alloc_pages_mpol+0xb3/0x260 [ 1147.648483][T28394] alloc_pages_noprof+0x8f/0x130 [ 1147.653782][T28394] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1147.659894][T28394] __kvmalloc_node_noprof+0x3d4/0x650 [ 1147.665297][T28394] ip_set_alloc+0x24/0x30 [ 1147.669835][T28394] hash_netiface_create+0x282/0x740 [ 1147.675218][T28394] ip_set_create+0x3cf/0x970 [ 1147.679846][T28394] nfnetlink_rcv_msg+0x509/0x5d0 [ 1147.684894][T28394] netlink_rcv_skb+0x123/0x220 [ 1147.689694][T28394] nfnetlink_rcv+0x167/0x1720 [ 1147.694740][T28394] netlink_unicast+0x5c0/0x690 [ 1147.699591][T28394] netlink_sendmsg+0x5c8/0x6f0 [ 1147.704639][T28394] ____sys_sendmsg+0x563/0x5b0 [ 1147.709716][T28394] ___sys_sendmsg+0x195/0x1e0 [ 1147.714508][T28394] __x64_sys_sendmsg+0xd4/0x160 [ 1147.719400][T28394] x64_sys_call+0x194c/0x3020 [ 1147.724286][T28394] do_syscall_64+0x12c/0x370 [ 1147.729005][T28394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.735184][T28394] [ 1147.737543][T28394] value changed: 0x00000000000001f7 -> 0x00000000000001f8 [ 1147.744931][T28394] [ 1147.747283][T28394] Reported by Kernel Concurrency Sanitizer on: [ 1147.753565][T28394] CPU: 1 UID: 0 PID: 28394 Comm: syz.7.6554 Tainted: G W syzkaller #0 PREEMPT(full) [ 1147.764536][T28394] Tainted: [W]=WARN [ 1147.768352][T28394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1147.778931][T28394] ================================================================== [ 1148.218135][T28394] syz.7.6554 (28394) used greatest stack depth: 5656 bytes left