last executing test programs: 2m22.381846435s ago: executing program 3 (id=380): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/warn_count', 0x0, 0x0) read$char_usb(r1, &(0x7f0000000f80)=""/4096, 0x1000) read(r0, &(0x7f00000000c0)=""/237, 0xed) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x89}, 0x0, 0x10000, 0xfffffffc, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7, 0x7ffc0001}]}) fgetxattr(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000040000000002d5b00"], &(0x7f0000000280)=""/82, 0x52) 2m21.228448715s ago: executing program 3 (id=389): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xfdef, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m21.047911481s ago: executing program 3 (id=391): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x107, 0x10, 0x4, 0x40, 0x1, @random="50df7c956f73"}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x107, 0x10, 0x4, 0x40, 0x1, @random="50df7c956f73"}, 0x10) (async) pipe2$9p(&(0x7f0000000040), 0x800) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) (async) 2m19.067503809s ago: executing program 3 (id=396): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '\xc0r\xe5\xe1:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0xfd, 0x575, &(0x7f00000013c0)="$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") r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000140)=0xb0b9) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, 0x0, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x5}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="180000c7fe7cf6dbc87d6e00010000000000000000000000100000000000000b100100000a000000"], 0x28}, 0xfc40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002bc0)={{r3, 0x0, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x6}, 0x0, &(0x7f0000002b00)}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r11, @ANYRES64=r9, @ANYRES16=r8, @ANYRES16=r11, @ANYRES64=r9, @ANYRES16=r10, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES32, @ANYRES32=r7], 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18f8c591b7000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00080000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x508402, 0x0) 2m18.523130947s ago: executing program 3 (id=406): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) lremovexattr(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='user.']) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="0b87df53da33c9f7d92600000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m17.87207718s ago: executing program 3 (id=410): eventfd(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) 2m17.87183527s ago: executing program 32 (id=410): eventfd(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) 1m12.527180832s ago: executing program 4 (id=1029): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36f, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001400050925bd7000fbdbdf25020604004e264e230e640000070000000600000003000000feffffff070000000200000003000080", @ANYRES32=0x0, @ANYBLOB="0300000002100000201467b5fc5800000000bfffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810) 1m10.392962115s ago: executing program 4 (id=1043): read(0xffffffffffffffff, &(0x7f00000000c0)=""/237, 0xed) r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7, 0x7ffc0001}]}) fgetxattr(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="02000040000000002d5b"], &(0x7f0000000280)=""/82, 0x52) 1m10.314267987s ago: executing program 4 (id=1045): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xffffff96) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000cc0)=ANY=[], 0x8, 0x2ef, &(0x7f00000007c0)="$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") r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0x4, &(0x7f00000000c0)=@raw=[@ringbuf_query], &(0x7f00000001c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000003c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x4, 0x5}, {0x2, 0x1, 0x1, 0xb}, {0x0, 0x3, 0xd, 0x1}, {0x5, 0x1, 0x0, 0x7}, {0x1, 0x3, 0xd}], 0x10, 0x8}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 1m10.090809555s ago: executing program 4 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x786, &(0x7f0000001b00)="$eJzs3MFrW3UcAPDve2vWba2mgge9TGGDDcbSdr1sJ+tFvAwGA69badNSmjajSWdbB2u9CcJcLyqC6N2jV2HMP8CbDBS8C0NnPaiXyEvTbOuSLlsbs83PB17z+738fu/7/Sbpr+9BXwL433oz+5FEDEbEhYjIN/anEXGw3joUsbY1bvPetclsS6JWu/hbkk2LzVq+eayk8TgQ9SnxWkTczkWc+vDRuJWV1bmJUqm42OgPV+evDFdWVk/Pzk/MFGeKC6Nj50bOjo2dHRnbt1qPv3fu8M0f3tnY+PHb6o2jfaeTGK/XHY3a9i3QA7Zek1yM79i/0I1gPXN5oJNRfd1PBACAx8jO8w80zs1ykY8Du52lOYEDAACA51Ktv9apvzseCQAAADxjkuh1BgAAAEB3bf8fwPa9vd26D7adu29HxFCr+H31e4gjDkUuIo5sJg/dfpBsTYM9WVuPiFvjLT5/yZ6PPXK/eXh/jsh+u5WtP+Ot1p+0uf5Ei/Wnb/u7E/ao/fp3P/6BNuvfhQ5jfPfl69kSuvUh3Bl/vbL80dFW8ZNm/KRN/Msdxr+x8fHNds/Vvo440fLvT/JQrF2+H2J4erbU6lerme7tf07eaRf/7nrEkUfiJ0k9arJ7/Vc6rP+DzT/m1naJf/LY7u//Vvz+h+Zln4lPGnmkEXGz8Zj1N3bEODb/0/ePRk7WtuNPtXn9W7//7zbr/6rD+n/5pn+5w6EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQl0bEYCRpodlO00IhYiAiXo0jaalcqZ6aLi8tTGXPRQxFLp2eLRVHIiK/1U+y/mi9fb9/Zkd/LCJe+fnwVtDZUrEwWS5N9bp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmgYiYjCStBARaUT8mU/TQqHXWQEAAAD7bqjXCQAAAABd5/ofAAAAXnxPe/2f7HMeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAvtwvnz2VbbvHdtMutPXV1ZmitfPT1VrMwV5pcmC5PlxSuFmXJ5plQsTJbnH3e8NCJGz8XS8nD1YGPXfHlpoXppdn5ipnipmOt6RQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNwfqWpIWISOvtNC0UIl6KiKHIJdOzpeJIRLwcEXfyuf6sP9rrpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh3lZXVuYlSqbj4DDaStY4H156DcrrRiCTiGUijTePzxruy25hkLaLnqaaNRPdynIgnmXX9MS9Lrxtv9Gg9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgtyorq3MTpVJxsdLrTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOit9NckIrLtRP744M5nDyZ/5euPEfH+Fxc/XZ6oVhdHs/2/N/dXP2vsP/PAxOv/ZQ0AAADwwnvrSQZvX6dvX8cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0qrKyOjdRKhUXu9iI9V5XCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPI1/AwAA//+U17a/") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000200c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsgid(0xee00) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r4, 0x0, 0x0, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000200081dcfcffffff03000000026c0000000000031f000000050016000400000008000200ac1414bb0800170042feb3d8e0e8a0ddeb990dbbaeb5203323de5314edb807e8bd93329c90428c92c81a37974366ed13662b55c549809cdefd4ad4f930a6832c0861abd77e3e6774773cca815582920a000000000000007e1eb76a18e76a193f20fc7250f3"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x8000000c}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="200029bd7000fcdbdf25070000000800020007000056"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0xc0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) connect(r6, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x2, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x800, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x10001}, 0x44) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1m9.860868643s ago: executing program 4 (id=1049): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @local, 0xb}, 0x48) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 1m9.309644272s ago: executing program 4 (id=1055): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000a}, [@generic={0x91, 0x1, 0x1, 0x46}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x28, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000c0ff000009"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) 1m9.297990342s ago: executing program 33 (id=1055): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000a}, [@generic={0x91, 0x1, 0x1, 0x46}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x28, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000c0ff000009"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) 24.608075599s ago: executing program 1 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a05"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) ptrace$poke(0x4, r1, &(0x7f00000002c0), 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x9000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 23.777444368s ago: executing program 1 (id=1388): syz_emit_ethernet(0x47, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x39, 0x500, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x25, 0x0, @wg=@data={0x4, 0x0, 0x8, "73db96a25bab14aac5f798bf77"}}}}}}, 0x0) 23.671662511s ago: executing program 1 (id=1391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a5c0000000c0a01010000000000000000050000000900020073797a31000000000900010073797a3100000000300003800c00008008000340000000021c0000800c00018006000100d1030000080004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) 23.575356144s ago: executing program 1 (id=1393): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xd}, 0x19084, 0x1, 0x10000, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xcfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0xff, 0x5a8, &(0x7f0000000680)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = dup(0xffffffffffffffff) getpgrp(0x0) sendmsg$AUDIT_SET(r2, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f0000000100)=[{0x6, 0x2, 0x8a, 0x9}, {0x5, 0x3, 0x5, 0x7}, {0x8, 0x63, 0x8, 0x1}, {0xffcd, 0x7, 0xff, 0x4}, {0x2, 0x4, 0xc, 0x9}, {0xa, 0x74, 0x6, 0x8e61}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f46000) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf251000000008000300", @ANYRES32=r5, @ANYBLOB="08003a000000000008000600", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) fchdir(r3) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x2930022, 0x0) r10 = syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs$pagemap(r10, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f00000006c0)={0x60, 0x0, &(0x7f0000f19000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7fff, 0x0, 0x0, 0x8, 0xe, 0x32, 0x40, 0xa}) 21.910428471s ago: executing program 1 (id=1405): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x108310, 0xffffffff, 0x0, 0x5, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) tee(r1, r5, 0x8f5, 0x100000000000000) write(r3, 0x0, 0x0) 20.323900455s ago: executing program 1 (id=1412): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = epoll_create1(0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x20002011}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x58, &(0x7f0000000180)}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0xf0ffffffffffffff, 0x0, 0x40001}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x28040680) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwritev(r5, &(0x7f0000001a00)=[{&(0x7f0000000580)="ada121d15c0ab3ffe9c48c355794dde4a96082f2f7ec77c1a0f09dad7091b323ff5cbaffe209846513095b86a0833cc3066b3e9f5c59f8507dcae627d030f86996a7772d3feac44a838031ebc55193002d600341d418edd4aee69dd9868f84990025f897ea70f2d6a618e128c34645b174fac7d41af6f579ba34ab1a946516305a89f8a3cf452d9af6e4731c6ae38a4b773f1c576e4574dced08972c438d148aa16c25e613a0052dfa306b1ff6b8d04537ad817677720af324", 0xb9}, {&(0x7f0000000800)="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", 0x800}, {&(0x7f0000000640)="2156f5047631baf50ac069af7b4bcf8d12642702754742d49a6519f55c74c910f9579a9b9ae68c82b7547a60131761b741", 0x31}, {&(0x7f0000001800)="331057757d01ca2e56bbb904fb9508e11ad36b777f24127253817853c1a4c59626fa266f162603b1cfdabf70c65feeb6f3c5274d382f2a072df5cf873138ca7e8933c7e9d6cb33274b303cd8c8e7441e57b6b1172c46a6e53c812cb5", 0x5c}, {&(0x7f0000001880)="71c9217193333f7277d8993c96fa8756f632a3a95b2eb6a8f09016947dc10301b32152a9c7352f132bebccdfa9935837f3595a76e00d642026900103ae5750abb2c7436ab11bd8459078704b90514c0c37df2b29aab29dcdacb69ce4dc5b13d48257e92144bc4c7e30a3cca3fa10cbd6bf3efce9b46a621a819d1c406fabb3acb47a2801759f0d59923c59ee2a289e3abb48ea9c5426f83e17132e7811fc41", 0x9f}, {&(0x7f0000001940)="30dc1a9b4322fc270910c0be6d2c9452fa7f99665bc0f96a3c9c3b21dd364e294e78d4e34c03acec4c52736aab94a8e7652aceec59c17743969f296a1110995e727316baf05d975c15407a232e99145475d0c490ec3079b23f31787537b35548d4ef0154512390b9d04fe9b32f8cc9e817f9d0307f5941623873ee4e74671ec0da5ef64109268cf5af457b0c9eeaa15c5b422ccb", 0x94}], 0x6, 0x3, 0xfffffbff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0xffff, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x4c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) fchdir(r7) rmdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000d31030e41001000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x3ff}) 20.298877476s ago: executing program 34 (id=1412): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = epoll_create1(0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x20002011}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x58, &(0x7f0000000180)}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0xf0ffffffffffffff, 0x0, 0x40001}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x28040680) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwritev(r5, &(0x7f0000001a00)=[{&(0x7f0000000580)="ada121d15c0ab3ffe9c48c355794dde4a96082f2f7ec77c1a0f09dad7091b323ff5cbaffe209846513095b86a0833cc3066b3e9f5c59f8507dcae627d030f86996a7772d3feac44a838031ebc55193002d600341d418edd4aee69dd9868f84990025f897ea70f2d6a618e128c34645b174fac7d41af6f579ba34ab1a946516305a89f8a3cf452d9af6e4731c6ae38a4b773f1c576e4574dced08972c438d148aa16c25e613a0052dfa306b1ff6b8d04537ad817677720af324", 0xb9}, {&(0x7f0000000800)="322fa23f5e7b88f82a7a3d069ec132512859b2b66a09c243c24a8bd45894ea48a01bc8fee242530fe16cd8c3c37c3f4f0145ded356a8a1011fb281e8b8479ac4d1840e2b5ab4699152c8b43d01ab2bc5f66c29417fd023f4a8bd90f6a841064c128ac0377d84e31b929f22666a4a9d6ca7276493e8fd47d8b2f66a23c067e6b26cdd20717689726952ecd7d3c6b8bfbbcfbc5a4147d340778cd5cbb6f06ca70e5c04265a642e8b717d2fe02a6eabed3c21c128ac748a0447d9b552fdeee3730db534bceb7493ff7f8a492812cb2806a0c2261e12f24f7e2895ad5bceda760623c7af4d3407845fbf1813f6d9460137fe795f77d1963a5c13509c4d308d52ed3e739c742eae6b2f0196d4bec94a2e8273612ab81cb132e5f9ab62e1b1a8be88916764c2d1ef254faa0280973e5a8b0a6b8a0ac9f9ad76fc0e0aabe010850aaa25225b2583a20a0c6fe9e8f441dbc90cf25edc2392ea2d324cbdb9ecc9c6b6f7b24528eff15cfd4fc78d305675bb54c20ae30272bde880a1bf833bacaf79d98bf723809d2dcd8ec3263a09121afb05f4efbf5eaf901244b77d77fb2e71ed8d5c91722b7508e368a49c8240d4b57b7ca2fea239e9cfbae721825ef4f1801a0b585ecdd5e428082e89e7515e1a650649691390f1f7c357b2325cd98299a6ddb14fd7d0bb8fb4ba6a7cbe1359f8de4f0b61cb745bb07b950ac534d805e7a5c0e3dabd8efdf878f78fd146834272f4496e7bb185b94ee829763f49f88c4d79fef54816d9775b13a5a9d5b43fd9fdd8961cdaf275f2af3a110b7dbeef765d8446f1b74df89f956b66d35c10ae0fd8db40f12aa1def3a15d31238183e2f3dc199432ff3e21011b820e72255cc7fbc08b8af907200bf7de59fb1f4112111805af0aa59d6225ac0055ff3b8f832c5bff6f2cb8288c3c0153f4d66f90e3d8bbf2cb6296c9c673ce8a0a457cd609452c392f1d195353fd9c6cf4d9075c4d5a12377cf782c8b488637066549d02b321815b5ccab877ff853269cd2650073cdebb81dbcdedfcd6f1b1636e4cca1c8548b156605e9c6d1e932bfdd787fae20994df10e84bf619bdd09ab514a9207c4264b82f5550ad20fc7eb7a96d02fcd7abfbd64060d7bd7c30e541a4c37c28f6ca92219e18a204960b3df88a4e6224d26a629aa8d74e9d3fa1a1c327b7be71cb95d1e550a3857def30ac70702ba5c2e7acacfc3f652d2e309e3e52214fc860251758a1bd264716a66069da1eccb4f36cd1bea8ad6849128a6f84cdc9cd7f4bca4393a9565f3a1411286defa6aecbfb499a2e0c6b8479d7de4be86185f5ffe3df79cbcdfdce946e8828a29760743777c893c332f5ffe614cb987bed8dc9f228ceea7eb088f3d1b98cacb6fa2058e7f55d85efcd30d43556af9b7f2360375ce9764146f1d67de0c1dcbc35a04176b204479381762343edbb2ee0490834e0402c97644a68948b65edf4bcf6ba6a70fbcaa3da3756384a60a80ceed263e0b29b8ce32809153b47aa40d10c22dc04fc75af84cf4d2bc77bcaf1dc67c7cdac44b8dfe3e5c45a79f8e2af69b4fc523ebdc283a6a49ab88a1087603a7e2da5e868bb77086bef1ef089d4a9dfb5578c3b4ac608a91da3a61abb1c902d80d8c5edc4768aa8ababbb8043852404ff613407dad9fc09b9baf02d9c51f16209c7025a0c81270cf8a906e8ac75a478bc3e89bfb6198066c16da8e7910194adaa2abe196fe75dd38f8f83be7ff8ed35d68f5a4789e9333be002835f92996f1cb258b74f209477798ae1ee3c5d8d5ee3ec9cd31737a6eccc4ffd38bc3813aa88508abfaa87f2880e8cc0baa5405d410e2b7db6fd0de79d79f17781e58b0d2da27c1f6721bf0efe7ec45c92b20303d8a791203b310602a3c8c2e48bf00834a717c2bd864a51c69134cd81a38b261738106f93c4a4343e9ae977c4d443c4eefb6d3a4fb266e8de3ec60a5cca0ddabea75cb935d712eb6492220441307fc74650dac4f7fc4fb773bcd23c3e41bfbcc0b39b6a78621350e848f40a465492cee1c4c6a6c289ecc54ba591da9e0b94b21a40220f7a372e00ce68d4b8f4e96c16dba642b60f60d987173e97bf622acf2ea8a8f51685488bce62532e92373cec0792835db9a45827c6d4b377ce8958e39aa6aa9789a1fe651b1bdd11a7964d73b6346baacb4e21c8161a8665981dfb0751a69cd22ae7eb33e2feba1cd1bfb5b98c5529d98a190b7ff036b587f8a2ff74b6449ada587740c009b56c846d928c67e859b27327b481728def79e50eb3ba08d1ca10634c62fffcfd550d25b543a4e779e145195a78c7a5e460d5fe33e05960a8b1e3b864f5ba2262b38119fe6195156e82ca962e1d1589ae7748bb2b197d772908175dfca1fcf8c566f88c1f6706bc8aae9c1a633825a6cb2fcc2db965bf4c747e4b79c2f80146ae49f1492c92281c1c1255bf50b4639fe977d7d4c4d6e47240bfbb5b9a434aaa9f8fc15b3b667de6ebbfd528cddb720c01580bffda4db880712c9782beeeac3300c2dd6c31beb6f5348c09b45e8bfc0ae74228d5baad7ffae95bac28e9540dd7e2968147d241048d08e55346fde9015a1a3fd24aac557d34b2798a0069e4609469237196897b02920e26614c3210c76054802ef6655bcfe9f4463c9f0ffaccb8197abcc9e2476ff21b7b5260ed0b0d87ef86639ae670e9e544baf071961076d58c81dac776b4c5e46ed6535fd7cb1679306031467691139818462a5cb66a4e1b8c52400a9fb70a86abd020d91b83ec4dbe579bc50dc3f32cd4c2be0cad27dd59e5651944f28ea8833a70eb85c8755fe924ed10fca6f6a003dac36f0ef427c74e047c99db15f455acb8919980539693021e5b61fd9a7c2539a79f5b40a130eec3f5494d15452edf876136f23d45", 0x800}, {&(0x7f0000000640)="2156f5047631baf50ac069af7b4bcf8d12642702754742d49a6519f55c74c910f9579a9b9ae68c82b7547a60131761b741", 0x31}, {&(0x7f0000001800)="331057757d01ca2e56bbb904fb9508e11ad36b777f24127253817853c1a4c59626fa266f162603b1cfdabf70c65feeb6f3c5274d382f2a072df5cf873138ca7e8933c7e9d6cb33274b303cd8c8e7441e57b6b1172c46a6e53c812cb5", 0x5c}, {&(0x7f0000001880)="71c9217193333f7277d8993c96fa8756f632a3a95b2eb6a8f09016947dc10301b32152a9c7352f132bebccdfa9935837f3595a76e00d642026900103ae5750abb2c7436ab11bd8459078704b90514c0c37df2b29aab29dcdacb69ce4dc5b13d48257e92144bc4c7e30a3cca3fa10cbd6bf3efce9b46a621a819d1c406fabb3acb47a2801759f0d59923c59ee2a289e3abb48ea9c5426f83e17132e7811fc41", 0x9f}, {&(0x7f0000001940)="30dc1a9b4322fc270910c0be6d2c9452fa7f99665bc0f96a3c9c3b21dd364e294e78d4e34c03acec4c52736aab94a8e7652aceec59c17743969f296a1110995e727316baf05d975c15407a232e99145475d0c490ec3079b23f31787537b35548d4ef0154512390b9d04fe9b32f8cc9e817f9d0307f5941623873ee4e74671ec0da5ef64109268cf5af457b0c9eeaa15c5b422ccb", 0x94}], 0x6, 0x3, 0xfffffbff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0xffff, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x4c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) fchdir(r7) rmdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000d31030e41001000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x3ff}) 3.110398384s ago: executing program 2 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x32, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.998639818s ago: executing program 0 (id=1548): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f00000005c0), 0x1, 0x520, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r1 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2.993088138s ago: executing program 6 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000100003042abd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800b00010062726964676500001400028005002500000004000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000500)=[{0x3, 0x0, 0x2, 0x7fff7ffc}, {0x100, 0xe, 0x6, 0x1}]}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x9}, 0x860, 0x10000, 0x0, 0x5, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x20, 0x0, 0x0, 0x41000, 0x5e, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x4e24, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in=@empty, {0x0, 0x2, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x517b, 0x0, 0x2, 0x8}, {0x0, 0x1, 0x796}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe55286f1921f74bd}, 0x0, 0x1a0b1}, [@lifetime_val={0x24, 0x9, {0xffff, 0x0, 0xb, 0x5}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xb52}, @sec_ctx={0x97, 0x8, {0x93, 0x8, 0x1, 0x6, 0x8b, "16c42a61020000000000000041ab50d31d2e314cf991add2c0b0552ae71e030095f632c6f2ad6af30d6e24511c25dd762d689fdbfcb687c322635fa4799d9eb69f0ca802f2a0dabdecdd7197f5cfb3b58dfa55ae2083d31243605a1099706df10765f5589cdd8366d5b73df6d7142a1447b8b6827b32a8cb45f1c66c02987457fad65ea703750000000000"}}, @proto={0x5, 0x19, 0x32}, @extra_flags={0x8}, @lifetime_val={0x24, 0x9, {0x400, 0x639b, 0xf55c, 0x2}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800080000000000000000000100ccc76b5f000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeb3) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x24000015) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x2b, 'net'}, {0x6, 'net_prio'}, {0x2d, 'hugetlb'}]}, 0x18) r5 = socket(0x10, 0x3, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) socket$rds(0x15, 0x5, 0x0) msgget$private(0x0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) open(&(0x7f0000000080)='./file0\x00', 0x48201, 0x0) 2.992885068s ago: executing program 2 (id=1551): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x108310, 0xffffffff, 0x0, 0x5, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) tee(r1, r5, 0x8f5, 0x100000000000000) write(r3, 0x0, 0x0) 2.669027549s ago: executing program 0 (id=1553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x70bd27, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0) 2.64046275s ago: executing program 7 (id=1554): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="e5f77470fa1df80ae56896b93bb4b114c90575681a4c", @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESOCT], 0xfa, 0x69f, &(0x7f0000000840)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (fail_nth: 6) 2.366637349s ago: executing program 7 (id=1555): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010200000000000000000a0000000c0019800800020005000000180002801400018008000100fdff14bb08000200ac1414bb"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x18, 0x31, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20080082}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0x140d, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffd}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc811}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003"], 0x78}}, 0x0) 2.366039349s ago: executing program 2 (id=1556): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000002600)=[{0x0}, {&(0x7f00000024c0)="71e1151f", 0x4}], 0x2) r2 = syz_open_pts(r0, 0x8182) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/kcm\x00') pread64(r3, &(0x7f0000000040)=""/26, 0x1a, 0x7fffffff) lseek(r3, 0x10001, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x200000, 0x100) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000) dup3(r2, r0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.816061608s ago: executing program 6 (id=1558): r0 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001300)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}, {@usrquota}, {@bh}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x3204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030300400000000000000312c6d61703d6f66662c63727566742c696f636861727365743d6d6163677265656b416d61703d61636f726e2c676f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666642c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x48065}, 0x8000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x7}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r5 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004740)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x10}}, {{&(0x7f00000016c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001840)}, {&(0x7f00000018c0)="55e0c6b00fbf19b86edb22a35d214af5d598e6173d25b65450e67f68cde380ffa6acf22afbf62876fe1fef14b832bd8beed698", 0x33}, {0x0}], 0x3, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x24040801}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e40)}], 0x1, &(0x7f0000002140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb8, 0x20048000}}, {{&(0x7f00000045c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x5, 0x20040810) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x4) getpgrp(0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') socket$inet6_sctp(0xa, 0x1, 0x84) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$netlink(0x10, 0x3, 0x10) 1.75534591s ago: executing program 0 (id=1559): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a2fbd6f908fb8fa81"], 0xec}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20004090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) prlimit64(r1, 0x3, &(0x7f0000000000)={0x8, 0xcd}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@bridge_dellink={0x24, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0xffffffffffffff05) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) syz_pidfd_open(0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@orlov}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@nouid32}, {@errors_remount}, {@debug}]}, 0x1, 0x45b, &(0x7f0000000ac0)="$eJzs28uLHMUfAPBv9+zmnd/OL8RHHupqFIOP3ewmxhy8KAoeFAQ9xOO6uwkxk6xkVzAh6CoSjxLwLh4F/wJPehH1JHjVuwSCBCHR00jPdO/OTGZmH5nMqPP5QCdV3TWp+k51TVd3pQMYWuPZH0nEroj4JSLG6tnmAuP1v27duDz7543Ls0lUq6//ntTK3bxxebYoWnxuZ5EZiUg/TuJAm3oXL146O1OpzF/I85NL596ZXLx46ekz52ZOz5+ePz994sSxo1PPHp9+pidxZnHd3P/+wsF9L7959dXZk1ff+uGrpIi/JY4eGe928LFqtcfVDdbuhnQyMsCGsCGl+jCN0dr4H4tSrHbeWLz00UAbB9xV1Wq1em/nw8tV4D8siUG3ABiM4kKf3f/mW3Hp78PsY/CuP1+/Acpiv5Vv9SMjkeZlRlfvb7f1uv7xiDi5/Nfn2RYbfQ6R9ro1AMAw+Cab/zzVNP/L5x9pND4X+l++hlKOiP9HxJ6IOB4ReyPinoha2fsi4v52lSSd629dJLl9/pNe23Rw65DN/57L17aa538rk6tyKc/trsU/mpw6U5k/kn8nh2N0a5af6lLHty/+/GmnY43zv2zL6i/mgnk7ro1sbf7M3MzSzJ3E3Oj6hxH7R9rFn6ysBGTdty8i9m+yjjNPfHmwSB8oNR9bO/4uerDOVP0i4vF6/y9HS/yFpPv65OS2qMwfmSzOitv9+NOV1zrVf0fx90DW/zvanv8r8ZeTxvXaxY3XceXXTzre02z2/N+SvNG0772ZpaULUxFbklfqjW7cP91Sbnq1fBb/4UPtx/+eWP0mDmTnfxrxQEQ8GBEP5W1/OCIeiYhDXeL//oVH3+4a/x+d4t/a5V/tjSz+uab+L374OvX/amJLtO5pnyid/e7rpkrLLfGv2f/HaqnD+Z71/P6tp12bO5sBAADg3ye72d8VSTqxkk7TiYn6/+HfGzvSysLi0pOnFt49P1d/R6Aco2nxpGus4XnoVH5bX+SnW/JH8+fGn5W21/ITswuVuUEHD0NuZ4fxn/mtNOjWAXed97VgeBn/MLQa3wMAhkzb63+5/+0A+q/N+N8+iHYA/dfu+v/BANoB9F/L+LfsB0PE838YXsY/DC/jH4bS4vZY+yV5CYnbEpH2p678RF3+B4Q8VIkB/zABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0yN8BAAD//5Ke58Q=") 1.683993783s ago: executing program 7 (id=1561): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "b1"}]}], {0x14}}, 0x78}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x1, 0x0, {0x15, 0x4, 0x3, 0x28, 0x73, 0x67, 0xe2, 0xeb, 0x6c, 0x7, @multicast1, @remote, {[@noop, @lsrr={0x83, 0x23, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0xe}]}, @end, @generic={0x44, 0x5, "fe5bb5"}, @lsrr={0x83, 0xf, 0x1e, [@multicast1, @local, @multicast2]}, @timestamp_addr={0x44, 0x4, 0x8a, 0x1, 0xd}]}}}}}}}, 0x0) r2 = fsmount(r0, 0x1, 0xf3) r3 = openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 1.570097677s ago: executing program 0 (id=1562): r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb011018"], 0x0, 0x29, 0x0, 0x0, 0xfffffffb}, 0x28) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) fallocate(r1, 0x0, 0x8001, 0x6) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x800000000000}}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.503996959s ago: executing program 5 (id=1563): r0 = socket$nl_rdma(0x10, 0x3, 0x14) memfd_create(&(0x7f0000000180)='\xd9\x80\xbf\xde\xf3|m\xe9^\xf5\"@\x05\xa0\x8f\xaa\x86nwZ\x11**F\xdf\xac\xc6(\x8e>\xbf0\xf1f\xb1\x87\x86!\x9c\xe1\xd2X\b\xaaO\a\xc7\b<@\xa0m\xc0\xd6\xc9\x9b\xcf\xd9\x10\r\x8f\xb7\x9au\x1b\xa2\xc5\x852v\x1a\x04\x1c\x89\xdb\x85>M\xf7\xcfd\x12.\xcd\xcc\xf0\xffV\xe12`o\xe6\xff\xbd\x0f\xa2N\xf7\xe5E\xca\xba\xf2\x01\xbcp\xd8\x18 \xb4\xa9o\xe8(A\x06q\xba\xdc-@\xac\xa9\x80L\xe8\x1ao\xfd\x01\x9f.\x04\x1c\xa2\xc6\xb4{(\xa7mn=VG9\foIZb\xfeT\x18=\xeem\xcd\'N\xf7\xb0\x83\x7f\n]F\va\xb9Am`\x88\xe0\xd7\xd0\x84\xe0\x80\xf7&\xaf\xd0E!\x03x\xd5\x98\xde\xaf\x84\x91[){\x9e&d\xb2\xda&\x1d\xce8o\xca\xc27G\x90\xaa\xdf\xf7\x85/bN\xc0\x94\xba\x91KBb\\', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) fcntl$setlease(r1, 0x400, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x713a, 0x65a}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800410072786500140033006c6f00"/53], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, 0xffffffffffffffff, 0x4, r6}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r12, &(0x7f0000000340)=""/19, 0x13, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010022bd7000f3dbdf250c0045"], 0x1c}, 0x1, 0x2000000, 0x0, 0x2000004c}, 0x80) 1.443375211s ago: executing program 0 (id=1564): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x2}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xfffc, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x5, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffffc, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x7ffffff}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x83, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0x200}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0xffffffff, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x10}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0xfffffffc, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50f, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x7f, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x6, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0xa1af, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x3, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xfffe, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)="17001315cf717229eacf26953adec274628909b28aef7c39f9ba4b22676f55d26c3402ccecec759c81c017e01155d01b089e9fc3e96454b81b44178b3f60ca54d4a9980989b9") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000410000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004d027c6bd6f676119000000b9b2e847a7e53c07abcdeaddb31fea6a004c90d435287c238bb308c791d5371630dea7f7cd8d790d37df", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000002000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000000000008400002e"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000010400000000000000000000000092f9c1a2b2b5f2cefbf6760d415f1dde1483c776", @ANYRES32=0x0, @ANYBLOB="2b030000000000002400128009000100626f6e640000000014000280080009000200000008000a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r8, 0x719, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) write(r5, &(0x7f0000004200)='t', 0x1) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff02000000000000000000000000000128"], 0xfdef) sendfile(r5, r4, 0x0, 0x3ffff) 1.442112351s ago: executing program 2 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000280)='./file2\x00', 0x20010, &(0x7f0000000a40)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="9c4ad8b272c9cb9b8f17058c4dc0bdd37708207d84cf0ba222b0cf4705a257f2cbe44f1781cd1c378ebe866eb2b60137df5f341c6c0edebee1bd41b409ebdd8fd7eaac23cdb07a3166cfdd582821ea77fed028b2fe4ff4c6aa417e79cd11e6797b72270bd76ef344bc0b4cfd6eb4b871ea204e694f44a147e0d4fd055c07ab4c4d8a6257f6c93667e4207338f658c943569dc23264044f47516610c5f209364928f86e3d73ab0a28", @ANYBLOB="df1d57e35b522bc95f7cf0276acbce231ebaaaddf952c0c6c47e17d41ea95ae5be7a03a120b9e5f311d1528fecadf4887dd53cc27b99f4cffa61a1be7c7ca04e5b41a73c0e599919e39112c3d4871cc024ea02900eedb9669781291f9117e905b71ddbe5d395880efb3dd32de36b1e3af62b737f7bc6a7026745914d7d2f35bc85abb0b226fa0108c731495f139a28ee73f3032f95f3f85ae8fe39f6fa75b709df11342173fa8f69b7a37252", @ANYBLOB="d9936b1073ebb4b766bdcf8dcb30d369f03fb8b4d11a3afcce03139cf03993696258f44899e8208bc032e06c3cf953deb619b353de89bcbde3be04e5895d6059256abe5d70f634eccad1dd59aa380dd5bceeb574e5ef744bfcf8cc05360bd1778a370800a3633d19daf22ca047a4dda9986cff887ef56fc8a37a89746a6900a923b3cce272c67b6a6aba9d60acba8873d7f07b48d55eea34f0c9b8928a0c8f0da9557aa84ff32caf0bf5fd22ae2d49d2b5f416f129453a2013a0ef1b6e6cfe7a31d9062e7ee3ef0aefe7ae3430a00f82ac783a8d48f866cbe3734ed57fa7f008ecbacbf4d1d642e63d8114cb7bd8cc797d91bcedf2592b", @ANYRESOCT, @ANYRES8=0x0], 0x1, 0x275, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x960a40, 0x6ab858183a7ef6fa) truncate(0x0, 0x800000000001ff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzszzFOAkEYBeC3sAsSTIgWlkYrW7gAt+A6xugl7EwsOYx38BAWNo6B2RUuQDTm+4p9M3n/TvKHX/XWZymlJHneX97bfTR9Nzock8sa0+Qiyc1tnpbL5GyaZFWrh5/ZLstVWeweOE/Svo527aLt23my2Z58QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M9oDseXec1pjc8k4+OBcjQ7S3K/vrob7o9duvV1M/y7N5oM70/Gu+9XqZJstqfbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4h5q2ZjfLxzf7c2yEMAwDUFRg+4BjBwoqFmKJ7N+kUi65KJkg3XuNz/J3ofX8vns9tXidXWbm49eO+/jcxqj0WdMe+2iqP9HvW17FnPHP69YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FAAA//8Xryc8") 1.402664482s ago: executing program 7 (id=1566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0xfff5, &(0x7f0000000ac0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.315431035s ago: executing program 7 (id=1567): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x1, 0x8}, {0x6, 0x2, 0xff, 0x1}]}) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000014c0)=0x1b) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 679.974257ms ago: executing program 6 (id=1568): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 586.40303ms ago: executing program 2 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000100003042abd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800b00010062726964676500001400028005002500000004000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000500)=[{0x3, 0x0, 0x2, 0x7fff7ffc}, {0x100, 0xe, 0x6, 0x1}]}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x9}, 0x860, 0x10000, 0x0, 0x5, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x20, 0x0, 0x0, 0x41000, 0x5e, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x4e24, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in=@empty, {0x0, 0x2, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x517b, 0x0, 0x2, 0x8}, {0x0, 0x1, 0x796}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe55286f1921f74bd}, 0x0, 0x1a0b1}, [@lifetime_val={0x24, 0x9, {0xffff, 0x0, 0xb, 0x5}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xb52}, @sec_ctx={0x97, 0x8, {0x93, 0x8, 0x1, 0x6, 0x8b, "16c42a61020000000000000041ab50d31d2e314cf991add2c0b0552ae71e030095f632c6f2ad6af30d6e24511c25dd762d689fdbfcb687c322635fa4799d9eb69f0ca802f2a0dabdecdd7197f5cfb3b58dfa55ae2083d31243605a1099706df10765f5589cdd8366d5b73df6d7142a1447b8b6827b32a8cb45f1c66c02987457fad65ea703750000000000"}}, @proto={0x5, 0x19, 0x32}, @extra_flags={0x8}, @lifetime_val={0x24, 0x9, {0x400, 0x639b, 0xf55c, 0x2}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 449.562525ms ago: executing program 7 (id=1570): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x606d, &(0x7f0000000180)={0x0, 0x8eab, 0x2, 0x3, 0x20a}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x80}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r4, 0x0, 0x0, 0x8800000) 443.616905ms ago: executing program 2 (id=1571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="009f530ae3565b00000000e06b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=ANY=[@ANYBLOB="bc030000100039042abd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="13000000c418060030001280080001007369740024000280060011004e22000005000900290000000800140005000000080003000a0101006c031680100001800c000400f5ffffff0d0000"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x54, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x131880) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', 0x0) socket(0x2, 0x80805, 0x0) 430.668055ms ago: executing program 6 (id=1572): syz_emit_ethernet(0x8a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff275bf349706688a800008100000086dd6010401200072f00fc0000000000000000000000000000fcff0200000000000000000000000000013c00"], 0x0) 403.123896ms ago: executing program 5 (id=1573): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f40)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x264, 0x7}, 0x3, 0x8, 0xf09}}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x2, 0xc, 0xfff, 0xfffffffe, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x403, 0x255, 0x6, 0x9, 0xd81, 0x8, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff309, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3c, 0xfffffbf1, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0xe, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x0, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x4000000, 0x5, 0x800, 0x4, 0x6, 0x8, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9484, 0x80, 0x5, 0x80000000, 0xdb, 0x40, 0x80, 0xffbf7ffc, 0x0, 0x8, 0x7, 0x1, 0x2, 0x8008, 0xffffffff, 0x9, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x81, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x6, 0x7fffffff, 0xfffffff7, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x2, 0x62cc, 0xfffffff5, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x2, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0x3, 0x0, 0x0, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x6, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x8001, 0x9, 0x401, 0x2, 0x1ff, 0x8, 0x157, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x20000005, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x74, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x3, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x20000040) 306.09121ms ago: executing program 6 (id=1574): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) sendmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000040)="b229", 0x2}], 0x2}}], 0x1, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r4, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40), 0x700}, 0x20) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x5c}}, 0x8080) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0x45}, 0x0) 207.331963ms ago: executing program 5 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0xe0}}, 0x0) 160.455345ms ago: executing program 5 (id=1576): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x8001, 0x0) lseek(r0, 0x0, 0x2) 76.130647ms ago: executing program 5 (id=1577): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x4000002b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 70.821298ms ago: executing program 5 (id=1578): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x141040, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendfile(r5, r4, 0x0, 0x7ffff088) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0xfb, 0x3) sendmmsg$unix(r3, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}}], 0x1, 0x84) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x14, 0x0, 0x1, 0x0, 0x0, 0x18008000}, 0xc0) 51.883758ms ago: executing program 0 (id=1579): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 6 (id=1580): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8) tkill(r1, 0x6) dup2(r2, r3) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) syz_io_uring_setup(0x1f81, &(0x7f0000000080)={0x0, 0x938, 0x13100, 0x2, 0x24, 0x0, r4}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x50) io_uring_enter(r6, 0x2219, 0xcf74, 0x51, 0x0, 0x0) r7 = syz_clone(0x304100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) kernel console output (not intermixed with test programs): 3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.420133][ T7439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.555471][ T4976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.788566][ T7476] loop5: detected capacity change from 0 to 128 [ 171.049752][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1114'. [ 171.066093][ T7497] loop5: detected capacity change from 0 to 1024 [ 171.076443][ T7494] loop0: detected capacity change from 0 to 8192 [ 171.323248][ T7506] loop6: detected capacity change from 0 to 512 [ 171.353883][ T7508] veth1_to_bond: entered allmulticast mode [ 171.379029][ T7506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.410051][ T7506] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.464287][ T7512] veth1_to_bond: left allmulticast mode [ 171.509540][ T7488] syz.0.1112 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 171.542272][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.0.1112 Not tainted syzkaller #0 PREEMPT(full) [ 171.542315][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.542334][ T7488] Call Trace: [ 171.542342][ T7488] [ 171.542352][ T7488] __dump_stack+0x1d/0x30 [ 171.542386][ T7488] dump_stack_lvl+0x95/0xd0 [ 171.542419][ T7488] dump_stack+0x15/0x1b [ 171.542531][ T7488] dump_header+0x80/0x240 [ 171.542639][ T7488] oom_kill_process+0x295/0x350 [ 171.542670][ T7488] out_of_memory+0x97d/0xb80 [ 171.542780][ T7488] try_charge_memcg+0x62e/0xa10 [ 171.542833][ T7488] obj_cgroup_charge_pages+0x23/0xc0 [ 171.542900][ T7488] __memcg_kmem_charge_page+0x9e/0x170 [ 171.542942][ T7488] __alloc_frozen_pages_noprof+0x18a/0x360 [ 171.543031][ T7488] alloc_pages_mpol+0xb3/0x260 [ 171.543074][ T7488] alloc_pages_noprof+0x8f/0x140 [ 171.543138][ T7488] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 171.543192][ T7488] __kvmalloc_node_noprof+0x3d4/0x650 [ 171.543229][ T7488] ? ip_set_alloc+0x24/0x30 [ 171.543304][ T7488] ? ip_set_alloc+0x24/0x30 [ 171.543347][ T7488] ip_set_alloc+0x24/0x30 [ 171.543382][ T7488] hash_netiface_create+0x282/0x740 [ 171.543444][ T7488] ? __pfx_hash_netiface_create+0x10/0x10 [ 171.543482][ T7488] ip_set_create+0x3cf/0x970 [ 171.543519][ T7488] ? __nla_parse+0x40/0x60 [ 171.543625][ T7488] nfnetlink_rcv_msg+0x509/0x5d0 [ 171.543678][ T7488] netlink_rcv_skb+0x123/0x220 [ 171.543722][ T7488] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 171.543780][ T7488] nfnetlink_rcv+0x167/0x1720 [ 171.543819][ T7488] ? __kfree_skb+0x109/0x150 [ 171.543917][ T7488] ? nlmon_xmit+0x4f/0x60 [ 171.543945][ T7488] ? consume_skb+0x4b/0x160 [ 171.543978][ T7488] ? nlmon_xmit+0x4f/0x60 [ 171.544006][ T7488] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 171.544067][ T7488] ? __dev_queue_xmit+0x136c/0x1f20 [ 171.544111][ T7488] ? __dev_queue_xmit+0x148/0x1f20 [ 171.544158][ T7488] ? ref_tracker_free+0x37d/0x3e0 [ 171.544243][ T7488] ? __netlink_deliver_tap+0x4dc/0x500 [ 171.544294][ T7488] netlink_unicast+0x5c0/0x690 [ 171.544357][ T7488] netlink_sendmsg+0x5c8/0x6f0 [ 171.544387][ T7488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.544411][ T7488] ____sys_sendmsg+0x563/0x5b0 [ 171.544477][ T7488] ___sys_sendmsg+0x195/0x1e0 [ 171.544526][ T7488] __x64_sys_sendmsg+0xd4/0x160 [ 171.544623][ T7488] x64_sys_call+0x194c/0x3020 [ 171.544724][ T7488] do_syscall_64+0x12c/0x370 [ 171.544762][ T7488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.544789][ T7488] RIP: 0033:0x7fef026dc819 [ 171.544811][ T7488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.544880][ T7488] RSP: 002b:00007fef01137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.544950][ T7488] RAX: ffffffffffffffda RBX: 00007fef02955fa0 RCX: 00007fef026dc819 [ 171.544969][ T7488] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000006 [ 171.544986][ T7488] RBP: 00007fef02772c91 R08: 0000000000000000 R09: 0000000000000000 [ 171.545003][ T7488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.545026][ T7488] R13: 00007fef02956038 R14: 00007fef02955fa0 R15: 00007ffc52c317c8 [ 171.545054][ T7488] [ 171.545352][ T7488] memory: usage 300168kB, limit 307200kB, failcnt 4965 [ 171.568329][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.657617][ T7511] xt_hashlimit: size too large, truncated to 1048576 [ 171.677959][ T7488] memory+swap: usage 284540kB, limit 9007199254740988kB, failcnt 0 [ 171.953964][ T7524] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 171.969375][ T7524] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 171.983072][ T7524] netdevsim netdevsim6 netdevsim0: refused to change device tx_queue_len [ 172.035195][ T7488] kmem: usage 130364kB, limit 9007199254740988kB, failcnt 0 [ 172.047085][ T7527] loop6: detected capacity change from 0 to 512 [ 172.070266][ T7525] loop2: detected capacity change from 0 to 128 [ 172.077659][ T7527] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 172.090019][ T7488] Memory cgroup stats for /syz0: [ 172.090397][ T7488] cache 888832 [ 172.098737][ T7488] rss 106496 [ 172.118283][ T7525] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.128218][ T7488] shmem 0 [ 172.137548][ T7527] EXT4-fs (loop6): 1 truncate cleaned up [ 172.148472][ T7488] mapped_file 110592 [ 172.152954][ T7527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.160249][ T7488] dirty 32768 [ 172.187152][ T7488] writeback 0 [ 172.190670][ T7488] workingset_refault_anon 302 [ 172.195470][ T7488] workingset_refault_file 3397 [ 172.200328][ T7488] swap 184320 [ 172.203968][ T7488] swapcached 16896000 [ 172.207995][ T7488] pgpgin 211660 [ 172.211662][ T7488] pgpgout 211412 [ 172.215406][ T7488] pgfault 120065 [ 172.218973][ T7488] pgmajfault 270 [ 172.222644][ T7488] inactive_anon 24576 [ 172.226704][ T7488] active_anon 102400 [ 172.230658][ T7488] inactive_file 0 [ 172.234333][ T7488] active_file 888832 [ 172.238360][ T7488] unevictable 0 [ 172.241918][ T7488] hierarchical_memory_limit 314572800 [ 172.247312][ T7488] hierarchical_memsw_limit 9223372036854771712 [ 172.253930][ T7488] total_cache 888832 [ 172.257853][ T7488] total_rss 106496 [ 172.261653][ T7488] total_shmem 0 [ 172.265173][ T7488] total_mapped_file 110592 [ 172.269687][ T7488] total_dirty 32768 [ 172.273553][ T7488] total_writeback 0 [ 172.277475][ T7488] total_workingset_refault_anon 302 [ 172.283087][ T7488] total_workingset_refault_file 3397 [ 172.288413][ T7488] total_swap 184320 [ 172.292670][ T7488] total_swapcached 16896000 [ 172.297251][ T7488] total_pgpgin 211660 [ 172.301734][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.310812][ T7488] total_pgpgout 211412 [ 172.314991][ T7488] total_pgfault 120065 [ 172.319084][ T7488] total_pgmajfault 270 [ 172.323874][ T7488] total_inactive_anon 24576 [ 172.335247][ T7488] total_active_anon 102400 [ 172.339696][ T7488] total_inactive_file 0 [ 172.345642][ T7488] total_active_file 888832 [ 172.350087][ T7488] total_unevictable 0 [ 172.360500][ T7488] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1112,pid=7487,uid=0 [ 172.375336][ T7488] Memory cgroup out of memory: Killed process 7488 (syz.0.1112) total-vm:96212kB, anon-rss:1336kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 172.448393][ T7530] loop6: detected capacity change from 0 to 128 [ 172.813897][ T7544] loop0: detected capacity change from 0 to 8192 [ 173.577055][ T7560] loop6: detected capacity change from 0 to 128 [ 173.608009][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1131'. [ 173.626998][ T7560] wg2: entered promiscuous mode [ 173.650088][ T7560] wg2: entered allmulticast mode [ 174.139468][ T7574] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1136'. [ 174.170077][ T7574] SELinux: security_context_str_to_sid (}) failed with errno=-22 [ 174.180333][ T7574] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1136'. [ 174.189506][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 174.189526][ T28] audit: type=1400 audit(1776307544.412:4552): avc: denied { setopt } for pid=7573 comm="syz.1.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.599132][ T7586] netlink: 'syz.2.1141': attribute type 13 has an invalid length. [ 174.607216][ T7586] netlink: 'syz.2.1141': attribute type 12 has an invalid length. [ 174.631640][ T118] bio_check_eod: 30 callbacks suppressed [ 174.631656][ T118] kworker/u8:5: attempt to access beyond end of device [ 174.631656][ T118] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 174.653948][ T7576] ------------[ cut here ]------------ [ 174.659860][ T7576] EA inode 11 i_nlink=2 [ 174.660012][ T7576] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.6.1137/7576 [ 174.676540][ T7576] Modules linked in: [ 174.680809][ T7576] CPU: 1 UID: 0 PID: 7576 Comm: syz.6.1137 Not tainted syzkaller #0 PREEMPT(full) [ 174.691175][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.703497][ T7576] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 174.710526][ T7576] Code: 14 34 99 ff 4c 8d 2d 7d a0 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff d2 dd 03 66 66 66 66 66 66 2e [ 174.731092][ T7576] RSP: 0018:ffffc90001877778 EFLAGS: 00010246 [ 174.737876][ T7576] RAX: ffff888103742c48 RBX: ffff88811ac71328 RCX: ffffffff81c02c98 [ 174.749401][ T7576] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 174.758408][ T7576] RBP: 000000000000000b R08: 000188811ac712db R09: 0000000000000000 [ 174.767527][ T7576] R10: ffffc900018776a8 R11: 0001c900018776a8 R12: ffff88811ac712d8 [ 174.776044][ T7576] R13: ffffffff871dcd00 R14: ffff88811ac71290 R15: 0000000000000001 [ 174.785046][ T7576] FS: 00007ff286d8f6c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 174.794672][ T7576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.801693][ T7576] CR2: 0000000034747865 CR3: 000000015de72000 CR4: 00000000003506f0 [ 174.810387][ T7576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.818962][ T7576] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 174.827459][ T7576] Call Trace: [ 174.831129][ T7576] [ 174.834652][ T7576] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 174.841300][ T7576] ? errseq_check+0x2c/0x50 [ 174.846660][ T7576] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 174.852814][ T7576] ? ext4_truncate+0x92b/0xb00 [ 174.857908][ T7576] ext4_evict_inode+0xac1/0xe40 [ 174.863607][ T7576] ? __pfx_ext4_evict_inode+0x10/0x10 [ 174.869701][ T7576] evict+0x2af/0x510 [ 174.874196][ T7576] ? __pfx_ext4_drop_inode+0x10/0x10 [ 174.880179][ T7576] ? iput+0x1ea/0x580 [ 174.884823][ T7576] iput+0x41a/0x580 [ 174.889372][ T7576] ext4_process_orphan+0x1a9/0x1c0 [ 174.895616][ T7576] ext4_orphan_cleanup+0x6a8/0xa00 [ 174.901206][ T7576] ext4_fill_super+0x3414/0x37c0 [ 174.908919][ T7576] ? set_blocksize+0x14c/0x270 [ 174.914169][ T7576] ? setup_bdev_super+0x30e/0x370 [ 174.920183][ T7576] ? __pfx_ext4_fill_super+0x10/0x10 [ 174.926480][ T7576] get_tree_bdev_flags+0x291/0x300 [ 174.931965][ T7576] ? __pfx_ext4_fill_super+0x10/0x10 [ 174.936525][ T118] kworker/u8:5: attempt to access beyond end of device [ 174.936525][ T118] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 174.938299][ T7576] get_tree_bdev+0x1f/0x30 [ 174.955887][ T7576] ext4_get_tree+0x1c/0x30 [ 174.960606][ T7576] vfs_get_tree+0x57/0x1d0 [ 174.965368][ T7576] do_new_mount+0x288/0x8d0 [ 174.970183][ T7576] path_mount+0x4d0/0xbc0 [ 174.975374][ T7576] __se_sys_mount+0x28c/0x2e0 [ 174.980936][ T7576] __x64_sys_mount+0x67/0x80 [ 174.981555][ T118] kworker/u8:5: attempt to access beyond end of device [ 174.981555][ T118] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 174.981599][ T118] kworker/u8:5: attempt to access beyond end of device [ 174.981599][ T118] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 174.987021][ T7576] x64_sys_call+0x2d61/0x3020 [ 175.018946][ T7576] do_syscall_64+0x12c/0x370 [ 175.020301][ T118] kworker/u8:5: attempt to access beyond end of device [ 175.020301][ T118] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 175.024848][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.043846][ T7576] RIP: 0033:0x7ff28833da8a [ 175.048917][ T7576] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.072068][ T7576] RSP: 002b:00007ff286d8ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.081346][ T7576] RAX: ffffffffffffffda RBX: 00007ff286d8eee0 RCX: 00007ff28833da8a [ 175.088997][ T118] kworker/u8:5: attempt to access beyond end of device [ 175.088997][ T118] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 175.089921][ T7576] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007ff286d8eea0 [ 175.111759][ T7576] RBP: 00002000000009c0 R08: 00007ff286d8eee0 R09: 0000000000800718 [ 175.120219][ T7576] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 175.132007][ T7576] R13: 00007ff286d8eea0 R14: 000000000000048d R15: 0000200000000200 [ 175.133361][ T118] kworker/u8:5: attempt to access beyond end of device [ 175.133361][ T118] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 175.140980][ T7576] [ 175.157679][ T7576] ---[ end trace 0000000000000000 ]--- [ 175.169946][ T7576] EXT4-fs (loop6): 1 orphan inode deleted [ 175.184263][ T7576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.236825][ T118] kworker/u8:5: attempt to access beyond end of device [ 175.236825][ T118] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 175.247229][ T28] audit: type=1326 audit(1776307545.458:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 175.270844][ T118] kworker/u8:5: attempt to access beyond end of device [ 175.270844][ T118] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 175.307793][ T118] kworker/u8:5: attempt to access beyond end of device [ 175.307793][ T118] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 175.322691][ T28] audit: type=1326 audit(1776307545.458:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 175.360279][ T28] audit: type=1326 audit(1776307545.458:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 175.375585][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.403184][ T28] audit: type=1326 audit(1776307545.458:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 175.429704][ T28] audit: type=1326 audit(1776307545.458:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 175.458272][ T28] audit: type=1400 audit(1776307545.677:4558): avc: denied { setopt } for pid=7593 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.517446][ T7600] set_capacity_and_notify: 4 callbacks suppressed [ 175.517465][ T7600] loop2: detected capacity change from 0 to 512 [ 175.538288][ T7602] bridge0: entered promiscuous mode [ 175.560657][ T7601] loop6: detected capacity change from 0 to 512 [ 175.568194][ T7600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.595095][ T7601] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 175.617886][ T7601] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1145: bad orphan inode 131083 [ 175.638846][ T7600] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.649496][ T7601] loop6: lost filesystem error report for type 5 error -117 [ 175.650090][ T7601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.733766][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.797156][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.134180][ T7629] loop5: detected capacity change from 0 to 128 [ 176.215835][ T28] audit: type=1400 audit(1776307546.434:4559): avc: denied { mount } for pid=7633 comm="syz.1.1157" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 176.300992][ T28] audit: type=1400 audit(1776307546.434:4560): avc: denied { mounton } for pid=7633 comm="syz.1.1157" path="/229/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 176.341723][ T28] audit: type=1400 audit(1776307546.434:4561): avc: denied { search } for pid=7633 comm="syz.1.1157" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 176.369418][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1159'. [ 176.458424][ T7647] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1163'. [ 176.496063][ T7642] loop1: detected capacity change from 0 to 128 [ 176.554518][ T7650] loop5: detected capacity change from 0 to 512 [ 176.594836][ T7650] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.653266][ T7650] EXT4-fs (loop5): orphan cleanup on readonly fs [ 176.666498][ T7650] EXT4-fs error (device loop5): __ext4_iget:5393: inode #11: block 2: comm syz.5.1164: invalid block [ 176.706365][ T7650] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 176.709265][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 176.725105][ C1] EXT4-fs (loop5): initial error at time 1776307546: __ext4_iget:5393: inode 11: block 2 [ 176.734997][ C1] EXT4-fs (loop5): last error at time 1776307546: __ext4_iget:5393: inode 11: block 2 [ 176.764180][ T7650] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1164: couldn't read orphan inode 11 (err -117) [ 176.790098][ T7650] loop5: lost filesystem error report for type 5 error -117 [ 176.808945][ T7650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 176.903481][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1165'. [ 176.922943][ T7659] loop6: detected capacity change from 0 to 128 [ 177.032885][ T118] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.132266][ T4976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.419289][ T7662] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1169'. [ 177.651537][ T7670] program syz.0.1172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.694598][ T7670] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 177.751336][ T7672] loop2: detected capacity change from 0 to 4096 [ 177.790601][ T7672] EXT4-fs: Ignoring removed bh option [ 177.858725][ T7672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.895299][ T7677] loop1: detected capacity change from 0 to 512 [ 177.901950][ T7677] EXT4-fs: Ignoring removed bh option [ 177.933781][ T7677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.955309][ T7677] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.153569][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.670037][ T7706] loop2: detected capacity change from 0 to 256 [ 178.684334][ T7701] loop6: detected capacity change from 0 to 8192 [ 179.087635][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 179.087757][ T5154] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 179.812127][ T7741] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4375 sclass=netlink_audit_socket pid=7741 comm=syz.0.1182 [ 179.830072][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 179.830086][ T28] audit: type=1400 audit(1776307550.042:4617): avc: denied { audit_write } for pid=7740 comm="syz.0.1182" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 179.931911][ T28] audit: type=1326 audit(1776307550.141:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz.0.1184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0xffff0000 [ 180.023779][ T7748] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.049393][ T7748] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 180.058684][ T7748] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 180.076927][ T7748] System zones: 0-2, 18-18, 34-34 [ 180.082635][ T7748] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1185: bad orphan inode 15 [ 180.093474][ T7748] loop0: lost filesystem error report for type 5 error -117 [ 180.093626][ T7748] ext4_test_bit(bit=14, block=18) = 1 [ 180.101009][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 180.101031][ C0] EXT4-fs (loop0): initial error at time 1776307550: ext4_orphan_get:1423 [ 180.101057][ C0] EXT4-fs (loop0): last error at time 1776307550: ext4_orphan_get:1423 [ 180.129751][ T7748] is_bad_inode(inode)=0 [ 180.134186][ T7748] NEXT_ORPHAN(inode)=2264924160 [ 180.139055][ T7748] max_ino=32 [ 180.142332][ T7748] i_nlink=0 [ 180.145767][ T7748] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.1185: corrupted inode contents [ 180.157687][ T7748] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.158011][ T7748] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #15: comm syz.0.1185: mark_inode_dirty error [ 180.194668][ T7748] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.195644][ T7748] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.1185: corrupted inode contents [ 180.216798][ T7748] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.216990][ T7748] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1185: mark_inode_dirty error [ 180.255129][ T7748] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.255376][ T7748] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.1185: mark inode dirty (error -117) [ 180.262474][ T7756] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.267197][ T7748] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.294608][ T7748] EXT4-fs warning (device loop0): ext4_evict_inode:285: xattr delete (err -117) [ 180.325793][ T7756] EXT4-fs (loop5): orphan cleanup on readonly fs [ 180.343022][ T7748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.355739][ T7756] EXT4-fs error (device loop5): __ext4_iget:5393: inode #11: block 2: comm syz.5.1188: invalid block [ 180.367135][ T7756] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 180.367953][ T7756] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1188: couldn't read orphan inode 11 (err -117) [ 180.377162][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 180.377185][ C1] EXT4-fs (loop5): initial error at time 1776307550: __ext4_iget:5393: inode 11: block 2 [ 180.377250][ C1] EXT4-fs (loop5): last error at time 1776307550: __ext4_iget:5393: inode 11: block 2 [ 180.415218][ T7756] loop5: lost filesystem error report for type 5 error -117 [ 180.422071][ T7756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 180.529588][ T28] audit: type=1326 audit(1776307550.730:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 180.553346][ T28] audit: type=1326 audit(1776307550.730:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 180.576879][ T28] audit: type=1326 audit(1776307550.730:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 180.620672][ T7675] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 180.645995][ T28] audit: type=1326 audit(1776307550.730:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 180.696126][ T28] audit: type=1326 audit(1776307550.730:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 180.721522][ T28] audit: type=1326 audit(1776307550.730:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 180.795463][ T7773] ext4: Unknown parameter '˙18446744073709551615˙˙˙˙0xffffffffffffffff0xffffffffffffffff”5¨Żq+˘-°Š­ażRw­í‘ ǔšÍñĤ&ġhӉ8ĝì4÷' [ 180.816663][ T28] audit: type=1326 audit(1776307550.730:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 181.066587][ T28] audit: type=1326 audit(1776307550.730:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.5.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 181.253783][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.257301][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.275668][ T7790] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 181.369098][ T4976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.409717][ T7809] set_capacity_and_notify: 3 callbacks suppressed [ 181.409735][ T7809] loop5: detected capacity change from 0 to 164 [ 181.423699][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 181.440652][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 181.442982][ T7809] iso9660: Unknown parameter '' [ 181.460149][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 181.469867][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 181.498975][ T7815] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1197'. [ 181.914018][ T7838] tmpfs: Bad value for 'mpol' [ 182.034807][ T7842] loop1: detected capacity change from 0 to 128 [ 182.206208][ T7846] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 182.235690][ T7849] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1210'. [ 182.329266][ T7857] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1211'. [ 182.330358][ T7844] loop1: detected capacity change from 0 to 1024 [ 182.409023][ T7844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 182.419045][ T7844] System zones: 0-1, 3-36 [ 182.429629][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 182.491677][ T7844] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1208: bad orphan inode 134217728 [ 182.503829][ T7844] loop1: lost filesystem error report for type 5 error -117 [ 182.519188][ T7844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.711221][ T7868] netlink: 'syz.0.1213': attribute type 7 has an invalid length. [ 182.837228][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.898371][ T7870] loop1: detected capacity change from 0 to 8192 [ 184.160494][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1217'. [ 184.187136][ T7888] loop0: detected capacity change from 0 to 1024 [ 184.206828][ T7888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.259220][ T7888] syzkaller0: entered allmulticast mode [ 184.286928][ T7892] loop6: detected capacity change from 0 to 128 [ 184.316353][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.345045][ T7898] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1219'. [ 184.379742][ T7901] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 184.394914][ T7901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.500037][ T7906] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.509939][ T7906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7906 comm=syz.0.1222 [ 184.527653][ T7906] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 185.231697][ T7849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.314708][ T7915] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 185.363824][ T7917] loop2: detected capacity change from 0 to 1024 [ 185.373152][ T7919] netlink: 'syz.5.1227': attribute type 13 has an invalid length. [ 185.461626][ T7926] loop0: detected capacity change from 0 to 128 [ 185.471634][ T7210] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 185.506408][ T7926] vfat: Unknown parameter 'unԟŠ ate' [ 185.592535][ T7210] CPU: 1 UID: 0 PID: 7210 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 185.592570][ T7210] Tainted: [W]=WARN [ 185.592577][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.592589][ T7210] Call Trace: [ 185.592596][ T7210] [ 185.592630][ T7210] __dump_stack+0x1d/0x30 [ 185.592685][ T7210] dump_stack_lvl+0x95/0xd0 [ 185.592716][ T7210] dump_stack+0x15/0x1b [ 185.592738][ T7210] dump_header+0x80/0x240 [ 185.592879][ T7210] oom_kill_process+0x295/0x350 [ 185.592910][ T7210] out_of_memory+0x97d/0xb80 [ 185.592939][ T7210] try_charge_memcg+0x62e/0xa10 [ 185.592981][ T7210] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 185.593143][ T7210] __swap_cache_prepare_and_add+0x67/0x460 [ 185.593315][ T7210] ? alloc_pages_mpol+0x217/0x260 [ 185.593356][ T7210] swap_cache_alloc_folio+0xa2/0x120 [ 185.593441][ T7210] swap_cluster_readahead+0x36b/0x3d0 [ 185.593510][ T7210] swapin_readahead+0xde/0x840 [ 185.593548][ T7210] ? __rcu_read_unlock+0x4e/0x70 [ 185.593576][ T7210] ? __perf_event_task_sched_in+0xa65/0xad0 [ 185.593657][ T7210] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 185.593696][ T7210] ? __rcu_read_unlock+0x4e/0x70 [ 185.593758][ T7210] ? swap_cache_get_folio+0x26f/0x280 [ 185.593805][ T7210] do_swap_page+0x2fe/0x21e0 [ 185.593846][ T7210] ? __schedule+0x93c/0xd40 [ 185.593922][ T7210] ? __rcu_read_lock+0x36/0x50 [ 185.593943][ T7210] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 185.594026][ T7210] handle_mm_fault+0xb46/0x3020 [ 185.594072][ T7210] ? vma_start_read+0x1c7/0x2c0 [ 185.594112][ T7210] do_user_addr_fault+0x62f/0x1050 [ 185.594226][ T7210] ? trace_page_fault_user+0x1f/0xe0 [ 185.594269][ T7210] exc_page_fault+0x62/0xa0 [ 185.594293][ T7210] asm_exc_page_fault+0x26/0x30 [ 185.594319][ T7210] RIP: 0033:0x7ff2882f7997 [ 185.594361][ T7210] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 185.594383][ T7210] RSP: 002b:00007fff98383eb0 EFLAGS: 00010202 [ 185.594454][ T7210] RAX: 0000000000000000 RBX: 000055555c8de500 RCX: 00007ff2882f7997 [ 185.594473][ T7210] RDX: 00007fff98383ef0 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.594595][ T7210] RBP: 00007fff98383f5c R08: 0000000000000000 R09: 0000000000000000 [ 185.594612][ T7210] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 185.594629][ T7210] R13: 00000000000927c0 R14: 000000000002cf87 R15: 00007fff98383fb0 [ 185.594652][ T7210] [ 185.594674][ T7210] memory: usage 235068kB, limit 307200kB, failcnt 203 [ 185.616385][ T7933] syzkaller0: Caught tx_queue_len zero misconfig [ 185.679964][ T7210] memory+swap: usage 208156kB, limit 9007199254740988kB, failcnt 0 [ 185.861612][ T7936] loop1: detected capacity change from 0 to 136 [ 185.891198][ T7919] loop5: detected capacity change from 0 to 128 [ 185.939569][ T7936] Attempt to read inode for relocated directory [ 185.949739][ T7933] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 185.972337][ T7932] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 185.995428][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 185.995448][ T28] audit: type=1400 audit(1776307556.185:4770): avc: denied { connect } for pid=7922 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.040887][ T28] audit: type=1400 audit(1776307556.185:4771): avc: denied { write } for pid=7922 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.094713][ T12] bio_check_eod: 227 callbacks suppressed [ 186.094732][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.094732][ T12] loop5: rw=1, sector=145, nr_sectors = 104 limit=128 [ 186.114638][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.114638][ T12] loop5: rw=1, sector=257, nr_sectors = 120 limit=128 [ 186.148716][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.148716][ T12] loop5: rw=1, sector=385, nr_sectors = 128 limit=128 [ 186.177836][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.177836][ T12] loop5: rw=1, sector=521, nr_sectors = 128 limit=128 [ 186.201647][ T7210] kmem: usage 119256kB, limit 9007199254740988kB, failcnt 0 [ 186.211736][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.211736][ T12] loop5: rw=1, sector=657, nr_sectors = 128 limit=128 [ 186.234746][ T7935] xt_hashlimit: size too large, truncated to 1048576 [ 186.244445][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.244445][ T12] loop5: rw=1, sector=793, nr_sectors = 128 limit=128 [ 186.258619][ T7210] Memory cgroup stats for /syz6: [ 186.258815][ T7210] cache 0 [ 186.277251][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.277251][ T12] loop5: rw=1, sector=929, nr_sectors = 112 limit=128 [ 186.321473][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.321473][ T12] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 186.339300][ T7210] rss 106496 [ 186.342573][ T7210] shmem 0 [ 186.367029][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.367029][ T12] loop5: rw=1, sector=513, nr_sectors = 8 limit=128 [ 186.392567][ T12] kworker/u8:0: attempt to access beyond end of device [ 186.392567][ T12] loop5: rw=1, sector=649, nr_sectors = 8 limit=128 [ 186.454186][ T7210] mapped_file 0 [ 186.466984][ T7210] dirty 0 [ 186.486987][ T7210] writeback 0 [ 186.513029][ T7210] workingset_refault_anon 37 [ 186.526071][ T7933] __nla_validate_parse: 3 callbacks suppressed [ 186.526091][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 186.569503][ T7210] workingset_refault_file 0 [ 186.574079][ T7210] swap 77824 [ 186.577303][ T7210] swapcached 335872 [ 186.608537][ T7210] pgpgin 34466 [ 186.612012][ T7210] pgpgout 34439 [ 186.629807][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.637945][ T7210] pgfault 10178 [ 186.641456][ T7210] pgmajfault 30 [ 186.644976][ T7210] inactive_anon 0 [ 186.687653][ T7210] active_anon 106496 [ 186.691602][ T7210] inactive_file 0 [ 186.695256][ T7210] active_file 4096 [ 186.722734][ T7210] unevictable 0 [ 186.726244][ T7210] hierarchical_memory_limit 314572800 [ 186.776420][ T7933] bridge_slave_1 (unregistering): left allmulticast mode [ 186.818009][ T7210] hierarchical_memsw_limit 9223372036854771712 [ 186.824277][ T7210] total_cache 0 [ 186.827762][ T7210] total_rss 106496 [ 186.831865][ T7933] bridge_slave_1 (unregistering): left promiscuous mode [ 186.839347][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.861361][ T7210] total_shmem 0 [ 186.864881][ T7210] total_mapped_file 0 [ 186.997206][ T7210] total_dirty 0 [ 187.006523][ T7210] total_writeback 0 [ 187.018706][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1234'. [ 187.085604][ T7210] total_workingset_refault_anon 37 [ 187.109692][ T7210] total_workingset_refault_file 0 [ 187.132469][ T7963] loop5: detected capacity change from 0 to 128 [ 187.184607][ T7210] total_swap 77824 [ 187.201799][ T7210] total_swapcached 335872 [ 187.217453][ T7210] total_pgpgin 34466 [ 187.230891][ T7210] total_pgpgout 34439 [ 187.246604][ T7210] total_pgfault 10178 [ 187.261937][ T7210] total_pgmajfault 30 [ 187.276891][ T7210] total_inactive_anon 0 [ 187.292546][ T7210] total_active_anon 106496 [ 187.312693][ T7210] total_inactive_file 0 [ 187.328199][ T7210] total_active_file 4096 [ 187.344457][ T7210] total_unevictable 0 [ 187.358579][ T7210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1224,pid=7911,uid=0 [ 187.411525][ T7210] Memory cgroup out of memory: OOM victim 7911 (syz.6.1224) is already exiting. Skip killing the task [ 188.258762][ T7967] loop6: detected capacity change from 0 to 1764 [ 188.745609][ T7967] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 188.828203][ T7969] loop5: detected capacity change from 0 to 1024 [ 188.854821][ T7969] ext2: Unknown parameter 'smackfsroot' [ 189.028644][ T28] audit: type=1400 audit(1776307559.209:4772): avc: denied { append } for pid=7972 comm="syz.0.1240" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.059361][ T7973] syzkaller0: left promiscuous mode [ 189.071826][ T7973] syzkaller0: left allmulticast mode [ 189.196642][ T28] audit: type=1400 audit(1776307559.379:4773): avc: denied { map } for pid=7977 comm="syz.0.1242" path="socket:[19515]" dev="sockfs" ino=19515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.266344][ T28] audit: type=1400 audit(1776307559.399:4774): avc: denied { read } for pid=7977 comm="syz.0.1242" path="socket:[19515]" dev="sockfs" ino=19515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.339155][ T28] audit: type=1400 audit(1776307559.439:4775): avc: denied { setattr } for pid=7977 comm="syz.0.1242" name="KEY" dev="sockfs" ino=19549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 189.423845][ T28] audit: type=1400 audit(1776307559.439:4776): avc: denied { setattr } for pid=7977 comm="syz.0.1242" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 190.094105][ T8020] usb usb7: usbfs: process 8020 (syz.5.1245) did not claim interface 0 before use [ 190.141590][ T8024] loop6: detected capacity change from 0 to 512 [ 190.168471][ T8024] vfat: Unknown parameter '01777777777777777777777˙˙˙˙˙˙˙˙' [ 190.180213][ T8028] syzkaller0: entered promiscuous mode [ 190.191933][ T8028] syzkaller0: entered allmulticast mode [ 190.202057][ T8024] loop6: detected capacity change from 0 to 512 [ 190.245261][ T28] audit: type=1400 audit(1776307560.437:4777): avc: denied { create } for pid=8030 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_kobject_uevent_socket permissive=1 [ 190.298344][ T8024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.317622][ T28] audit: type=1400 audit(1776307560.497:4778): avc: denied { append } for pid=8021 comm="syz.6.1246" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.414147][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.441133][ T8031] lo speed is unknown, defaulting to 1000 [ 190.651082][ T8031] lo speed is unknown, defaulting to 1000 [ 191.630495][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1258'. [ 191.639739][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1257'. [ 191.669915][ T8062] loop6: detected capacity change from 0 to 1024 [ 191.692133][ T8063] loop1: detected capacity change from 0 to 1024 [ 191.720960][ T8062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.838236][ T8063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.860075][ T8062] syzkaller0: entered promiscuous mode [ 191.865682][ T8062] syzkaller0: entered allmulticast mode [ 191.991359][ T8074] loop0: detected capacity change from 0 to 256 [ 192.020521][ T8063] syzkaller0: entered promiscuous mode [ 192.036397][ T8063] syzkaller0: entered allmulticast mode [ 192.148796][ T8077] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1261'. [ 192.170180][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.219443][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.278010][ T8083] loop1: detected capacity change from 0 to 512 [ 192.282883][ T8079] 9p: Bad value for 'rfdno' [ 192.306309][ T8083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.317462][ T8084] devtmpfs: Bad value for 'nr_inodes' [ 192.335127][ T8083] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1263: bad orphan inode 131083 [ 192.368589][ T8083] loop1: lost filesystem error report for type 5 error -117 [ 192.371278][ T8083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.418593][ T28] audit: type=1400 audit(1776307562.583:4779): avc: denied { setopt } for pid=8086 comm="syz.6.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.537866][ T8093] loop0: detected capacity change from 0 to 512 [ 192.541805][ T8093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.542535][ T8093] EXT4-fs (loop0): orphan cleanup on readonly fs [ 192.542685][ T8093] EXT4-fs error (device loop0): __ext4_iget:5393: inode #11: block 2: comm syz.0.1267: invalid block [ 192.542716][ T8093] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 192.543013][ T8093] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1267: couldn't read orphan inode 11 (err -117) [ 192.543045][ T8093] loop0: lost filesystem error report for type 5 error -117 [ 192.543791][ T8093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.550750][ T28] audit: type=1326 audit(1776307562.723:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 192.550788][ T28] audit: type=1326 audit(1776307562.723:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 192.550819][ T28] audit: type=1326 audit(1776307562.723:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 192.550861][ T28] audit: type=1326 audit(1776307562.723:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 192.550895][ T28] audit: type=1326 audit(1776307562.723:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 192.560954][ T28] audit: type=1326 audit(1776307562.733:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 192.614368][ T28] audit: type=1326 audit(1776307562.783:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 192.826114][ T8083] lo speed is unknown, defaulting to 1000 [ 192.875100][ T28] audit: type=1326 audit(1776307562.783:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fef026dc582 code=0x7ffc0000 [ 193.012529][ T8083] lo speed is unknown, defaulting to 1000 [ 193.029047][ T8095] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.1263: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 193.052690][ T28] audit: type=1326 audit(1776307562.783:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fef026dc617 code=0x7ffc0000 [ 193.195617][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.666926][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.787125][ T8120] loop2: detected capacity change from 0 to 256 [ 193.849194][ T8120] FAT-fs (loop2): Directory bread(block 64) failed [ 193.855817][ T8120] FAT-fs (loop2): Directory bread(block 65) failed [ 193.862528][ T8120] FAT-fs (loop2): Directory bread(block 66) failed [ 193.869182][ T8120] FAT-fs (loop2): Directory bread(block 67) failed [ 193.875785][ T8120] FAT-fs (loop2): Directory bread(block 68) failed [ 193.882450][ T8120] FAT-fs (loop2): Directory bread(block 69) failed [ 193.889166][ T8120] FAT-fs (loop2): Directory bread(block 70) failed [ 193.895860][ T8120] FAT-fs (loop2): Directory bread(block 71) failed [ 193.902456][ T8120] FAT-fs (loop2): Directory bread(block 72) failed [ 193.909003][ T8120] FAT-fs (loop2): Directory bread(block 73) failed [ 194.045261][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1273'. [ 194.091208][ T8123] loop6: detected capacity change from 0 to 1024 [ 194.125181][ T8123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.869271][ T8133] loop0: detected capacity change from 0 to 512 [ 194.902364][ T8133] vfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙' [ 195.277555][ T8136] loop5: detected capacity change from 0 to 512 [ 195.285915][ T8136] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 195.305512][ T8136] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1275: invalid indirect mapped block 83886080 (level 1) [ 195.319535][ T8136] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 195.319740][ T8136] EXT4-fs (loop5): Remounting filesystem read-only [ 195.328902][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 195.328917][ C0] EXT4-fs (loop5): initial error at time 1776307565: ext4_free_branches:1023: inode 16 [ 195.328944][ C0] EXT4-fs (loop5): last error at time 1776307565: ext4_free_branches:1023: inode 16 [ 195.362650][ T8136] EXT4-fs (loop5): 1 orphan inode deleted [ 195.371400][ T8136] EXT4-fs (loop5): 1 truncate cleaned up [ 195.393696][ T8136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.429807][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.468432][ T4976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.483918][ T8141] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 195.543193][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.552214][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.563254][ T8143] loop5: detected capacity change from 0 to 1024 [ 195.581238][ T8148] program syz.2.1279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.627340][ T8152] netlink: 'syz.0.1281': attribute type 10 has an invalid length. [ 195.659894][ T8152] team0: Port device netdevsim1 added [ 195.709528][ T8152] loop0: detected capacity change from 0 to 2048 [ 196.010097][ T8165] loop6: detected capacity change from 0 to 1024 [ 196.040324][ T8165] EXT4-fs: test_dummy_encryption option not supported [ 196.376126][ T9] IPVS: starting estimator thread 0... [ 196.464734][ T8172] IPVS: using max 2256 ests per chain, 112800 per kthread [ 196.536667][ T8162] xt_hashlimit: size too large, truncated to 1048576 [ 196.694382][ T8177] netlink: 'syz.2.1287': attribute type 13 has an invalid length. [ 196.729360][ T8177] netlink: 'syz.2.1287': attribute type 12 has an invalid length. [ 196.878316][ T8180] loop2: detected capacity change from 0 to 128 [ 196.923819][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1288'. [ 197.103614][ T8183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.250630][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'. [ 197.304608][ T8192] set_capacity_and_notify: 1 callbacks suppressed [ 197.304630][ T8192] loop6: detected capacity change from 0 to 512 [ 197.328296][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 197.336835][ T8192] EXT4-fs: Ignoring removed nobh option [ 197.348090][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'. [ 197.367387][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.397221][ T8192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.430842][ T8192] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.442389][ T8193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8193 comm=syz.1.1289 [ 197.497115][ T118] bio_check_eod: 3 callbacks suppressed [ 197.497167][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.497167][ T118] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 197.526464][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.526464][ T118] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 197.530215][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.541014][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.541014][ T118] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 197.562668][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.562668][ T118] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 197.576675][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.576675][ T118] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 197.590331][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.590331][ T118] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 197.604096][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.604096][ T118] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 197.626954][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.626954][ T118] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 197.665147][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.665147][ T118] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 197.695010][ T118] kworker/u8:5: attempt to access beyond end of device [ 197.695010][ T118] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 197.856138][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 197.856155][ T28] audit: type=1400 audit(1776307568.025:4862): avc: denied { setopt } for pid=8207 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.067312][ T8212] loop6: detected capacity change from 0 to 1024 [ 198.081161][ T8212] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.151447][ T8212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.165414][ T8212] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.497635][ T28] audit: type=1400 audit(1776307568.085:4863): avc: denied { create } for pid=8207 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.685112][ T8220] netlink: 'syz.1.1296': attribute type 10 has an invalid length. [ 198.877949][ T28] audit: type=1400 audit(1776307568.085:4864): avc: denied { ioctl } for pid=8207 comm="syz.2.1295" path="socket:[19914]" dev="sockfs" ino=19914 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.928885][ T8223] loop1: detected capacity change from 0 to 2048 [ 199.000884][ T8220] team0: Port device netdevsim1 added [ 199.643683][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.743401][ T28] audit: type=1326 audit(1776307569.903:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 199.768889][ T8242] netlink: 'syz.6.1299': attribute type 1 has an invalid length. [ 199.779111][ T28] audit: type=1326 audit(1776307569.903:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 199.791896][ T8242] bond1: entered promiscuous mode [ 199.827696][ T28] audit: type=1326 audit(1776307569.913:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 199.839548][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 199.853035][ T28] audit: type=1326 audit(1776307569.913:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 199.867119][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 199.884000][ T28] audit: type=1326 audit(1776307569.913:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 199.899634][ T8242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.917280][ T28] audit: type=1326 audit(1776307569.913:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 199.946347][ T28] audit: type=1326 audit(1776307569.913:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef026dc819 code=0x7ffc0000 [ 199.975999][ T8253] rdma_rxe: rxe_newlink: failed to add lo [ 200.006596][ T8251] loop1: detected capacity change from 0 to 1024 [ 200.015915][ T8253] loop6: detected capacity change from 0 to 1024 [ 200.027918][ T8253] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.052256][ T8253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.061393][ T8253] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.073380][ T8253] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.1299: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 200.095510][ T8251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.118879][ T8253] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 200.119067][ T8253] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1299: couldn't read orphan inode 11 (err -117) [ 200.128289][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 200.128328][ C0] EXT4-fs (loop6): initial error at time 1776307570: ext4_ext_check_inode:521: inode 11 [ 200.128375][ C0] EXT4-fs (loop6): last error at time 1776307570: ext4_ext_check_inode:521: inode 11 [ 200.173974][ T8253] loop6: lost filesystem error report for type 5 error -117 [ 200.174680][ T8253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.202287][ T8249] bond2: entered promiscuous mode [ 200.217673][ T8249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.314195][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.334966][ T8242] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1299: Invalid block bitmap block 0 in block_group 0 [ 200.367218][ T8242] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1299: Failed to acquire dquot type 0 [ 200.486628][ T8268] loop2: detected capacity change from 0 to 512 [ 200.518580][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.551918][ T8268] EXT4-fs: test_dummy_encryption option not supported [ 200.613481][ T8274] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 200.687608][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 200.865531][ T8283] batadv0: entered promiscuous mode [ 200.921877][ T8266] bridge1: entered promiscuous mode [ 200.936393][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1313'. [ 200.940600][ T8266] bridge1: entered allmulticast mode [ 200.975571][ T8266] team0: Port device bridge1 added [ 201.056080][ T8292] tipc: Started in network mode [ 201.061221][ T8292] tipc: Node identity e0000002, cluster identity 4711 [ 201.068107][ T8292] tipc: Enabling of bearer rejected, failed to enable media [ 201.123856][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1316'. [ 201.184677][ T8296] loop2: detected capacity change from 0 to 1024 [ 201.247963][ T8296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.291414][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 201.425726][ T8305] loop1: detected capacity change from 0 to 164 [ 201.566412][ T8313] netlink: 'syz.1.1322': attribute type 29 has an invalid length. [ 201.641809][ T8316] lo speed is unknown, defaulting to 1000 [ 201.652814][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.705839][ T8316] lo speed is unknown, defaulting to 1000 [ 202.032404][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.041308][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.534065][ T8349] __nla_validate_parse: 3 callbacks suppressed [ 202.534085][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 202.557972][ T8349] bond3: entered promiscuous mode [ 202.563601][ T8349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.670668][ T8356] loop2: detected capacity change from 0 to 1024 [ 202.794120][ T8359] bond1: entered allmulticast mode [ 202.842324][ T8359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.927703][ T8359] loop1: detected capacity change from 0 to 128 [ 203.307101][ T8367] xt_hashlimit: size too large, truncated to 1048576 [ 203.550991][ T8387] netlink: 'syz.6.1344': attribute type 13 has an invalid length. [ 203.559105][ T8387] netlink: 'syz.6.1344': attribute type 12 has an invalid length. [ 203.567310][ T8382] loop5: detected capacity change from 0 to 1024 [ 203.594945][ T8387] loop6: detected capacity change from 0 to 128 [ 203.740499][ T8389] loop1: detected capacity change from 0 to 512 [ 203.784014][ T8389] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.796208][ T2237] bio_check_eod: 102 callbacks suppressed [ 203.796298][ T2237] kworker/u8:9: attempt to access beyond end of device [ 203.796298][ T2237] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 203.816976][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 203.824404][ T8389] EXT4-fs (loop1): orphan cleanup on readonly fs [ 203.833449][ T8389] EXT4-fs error (device loop1): __ext4_iget:5393: inode #11: block 2: comm syz.1.1345: invalid block [ 203.853764][ T8389] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.853972][ T8389] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1345: couldn't read orphan inode 11 (err -117) [ 203.863602][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 203.863624][ C0] EXT4-fs (loop1): initial error at time 1776307574: __ext4_iget:5393: inode 11: block 2 [ 203.863659][ C0] EXT4-fs (loop1): last error at time 1776307574: __ext4_iget:5393: inode 11: block 2 [ 203.894238][ T2237] kworker/u8:9: attempt to access beyond end of device [ 203.894238][ T2237] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 203.903083][ T8391] bond4: entered promiscuous mode [ 203.923898][ T2237] kworker/u8:9: attempt to access beyond end of device [ 203.923898][ T2237] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 203.937408][ T2237] kworker/u8:9: attempt to access beyond end of device [ 203.937408][ T2237] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 203.946265][ T8391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.953998][ T2237] kworker/u8:9: attempt to access beyond end of device [ 203.953998][ T2237] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 203.971155][ T2237] kworker/u8:9: attempt to access beyond end of device [ 203.971155][ T2237] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 203.993810][ T2237] kworker/u8:9: attempt to access beyond end of device [ 203.993810][ T2237] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 204.023832][ T2237] kworker/u8:9: attempt to access beyond end of device [ 204.023832][ T2237] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 204.037342][ T2237] kworker/u8:9: attempt to access beyond end of device [ 204.037342][ T2237] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 204.050958][ T8389] loop1: lost filesystem error report for type 5 error -117 [ 204.060393][ T8389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.124122][ T2237] kworker/u8:9: attempt to access beyond end of device [ 204.124122][ T2237] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 204.168729][ T28] kauditd_printk_skb: 189 callbacks suppressed [ 204.168744][ T28] audit: type=1326 audit(1776307574.328:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 204.249518][ T28] audit: type=1326 audit(1776307574.328:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 204.481520][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.621577][ T28] audit: type=1326 audit(1776307574.328:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 204.705032][ T28] audit: type=1326 audit(1776307574.328:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 204.842066][ T28] audit: type=1326 audit(1776307574.328:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 204.866539][ T28] audit: type=1326 audit(1776307574.328:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 204.912011][ T28] audit: type=1326 audit(1776307574.328:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 204.946145][ T8398] xt_hashlimit: size too large, truncated to 1048576 [ 204.984752][ T28] audit: type=1326 audit(1776307574.358:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 205.041625][ T28] audit: type=1326 audit(1776307574.358:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 205.068272][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1350'. [ 205.098014][ T28] audit: type=1326 audit(1776307574.358:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f976bb4c819 code=0x7ffc0000 [ 205.132682][ T8410] loop0: detected capacity change from 0 to 1024 [ 205.200710][ T8410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.281034][ T8415] xt_time: unknown flags 0xc [ 205.330238][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1347'. [ 205.342504][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.359029][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1347'. [ 205.420978][ T8423] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 205.458769][ T8425] loop0: detected capacity change from 0 to 1024 [ 205.482544][ T8423] loop1: detected capacity change from 0 to 2048 [ 205.539043][ T8425] EXT4-fs: Mount option(s) incompatible with ext2 [ 205.564054][ T8425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51217 sclass=netlink_route_socket pid=8425 comm=syz.0.1355 [ 205.617575][ T8432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8432 comm=syz.1.1356 [ 205.669016][ T8428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8428 comm=syz.1.1356 [ 205.719910][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 205.738776][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 205.755290][ T8434] netlink: 'syz.0.1358': attribute type 14 has an invalid length. [ 205.993431][ T8448] loop6: detected capacity change from 0 to 1024 [ 206.000294][ T8448] ext4: Unknown parameter 'nouser_xattr' [ 206.518338][ T8455] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 206.640228][ T8457] netlink: 'syz.0.1366': attribute type 10 has an invalid length. [ 206.689183][ T8461] program syz.6.1367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.766815][ T8457] loop0: detected capacity change from 0 to 2048 [ 206.878087][ T8467] netlink: 'syz.6.1369': attribute type 13 has an invalid length. [ 206.885980][ T8467] netlink: 'syz.6.1369': attribute type 12 has an invalid length. [ 207.382106][ T8474] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.389285][ T3423] IPVS: starting estimator thread 0... [ 207.437879][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.484390][ T8479] IPVS: using max 2208 ests per chain, 110400 per kthread [ 207.507288][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 207.523825][ T3423] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 208.264644][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1379'. [ 208.357471][ T8499] set_capacity_and_notify: 1 callbacks suppressed [ 208.357490][ T8499] loop1: detected capacity change from 0 to 1024 [ 208.421268][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1380'. [ 208.435912][ T8499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.480959][ T8502] hub 8-0:1.0: USB hub found [ 208.485793][ T8502] hub 8-0:1.0: 8 ports detected [ 208.658790][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 208.712860][ T8515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8515 comm=syz.0.1384 [ 209.069737][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.182388][ T8537] netlink: 'syz.1.1391': attribute type 4 has an invalid length. [ 209.363339][ T8543] lo speed is unknown, defaulting to 1000 [ 209.466594][ T8543] lo speed is unknown, defaulting to 1000 [ 209.705162][ T8546] loop1: detected capacity change from 0 to 512 [ 209.853586][ T8546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.029141][ T8561] loop5: detected capacity change from 0 to 512 [ 210.053736][ T8561] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.120566][ T8561] EXT4-fs (loop5): 1 truncate cleaned up [ 210.131590][ T8563] netlink: 'syz.0.1397': attribute type 10 has an invalid length. [ 210.170580][ T8561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.198079][ T8563] loop0: detected capacity change from 0 to 2048 [ 210.214732][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 210.214751][ T28] audit: type=1400 audit(1776307580.372:5269): avc: denied { load_policy } for pid=8565 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 210.300991][ T8566] SELinux: failed to load policy [ 210.332169][ T8572] loop0: detected capacity change from 0 to 1024 [ 210.351327][ T4976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.500893][ T28] audit: type=1326 audit(1776307580.662:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 210.597546][ T28] audit: type=1326 audit(1776307580.662:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 210.651668][ T28] audit: type=1326 audit(1776307580.692:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 210.733496][ T8592] loop2: detected capacity change from 0 to 1024 [ 210.768032][ T8586] xt_hashlimit: size too large, truncated to 1048576 [ 210.800195][ T28] audit: type=1326 audit(1776307580.692:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 210.852550][ T8592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.864797][ T28] audit: type=1326 audit(1776307580.692:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 210.903391][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 210.909660][ T5154] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.916129][ T28] audit: type=1326 audit(1776307580.702:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 210.941388][ T28] audit: type=1326 audit(1776307580.702:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 210.965347][ T28] audit: type=1326 audit(1776307580.702:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 210.989477][ T28] audit: type=1326 audit(1776307580.702:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.5.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f614c819 code=0x7ffc0000 [ 211.109609][ T8596] syzkaller0: entered promiscuous mode [ 211.133553][ T8596] syzkaller0: entered allmulticast mode [ 211.212726][ T8579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.223477][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1407'. [ 212.270549][ T8606] netlink: 'syz.5.1409': attribute type 10 has an invalid length. [ 212.352546][ T8606] loop5: detected capacity change from 0 to 2048 [ 212.458381][ T8611] smc: removing ib device syU× [ 212.472586][ T2237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.605519][ T2237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.854766][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.934499][ T2237] team0: Port device netdevsim1 removed [ 212.941425][ T2237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.048565][ T2237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.080831][ T8639] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.1420'. [ 213.102654][ T8641] loop2: detected capacity change from 0 to 512 [ 213.137929][ T8641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.228895][ T8639] syzkaller1: entered promiscuous mode [ 213.236041][ T8639] syzkaller1: entered allmulticast mode [ 213.243661][ T8641] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.396184][ T2237] bridge_slave_1: left allmulticast mode [ 213.410082][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.421583][ T2237] bridge_slave_1: left promiscuous mode [ 213.444411][ T8650] netlink: 'syz.2.1422': attribute type 10 has an invalid length. [ 213.451581][ T2237] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.528695][ T8651] loop2: detected capacity change from 0 to 2048 [ 213.638045][ T2237] team0: Port device bridge1 removed [ 213.694919][ T2237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.731186][ T2237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.746866][ T2237] bond0 (unregistering): Released all slaves [ 213.764444][ T2237] bond1 (unregistering): Released all slaves [ 213.781583][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1424'. [ 213.794496][ T8650] bond0: (slave netdevsim1): Releasing backup interface [ 213.852211][ T8629] lo speed is unknown, defaulting to 1000 [ 213.859127][ T2237] tipc: Left network mode [ 213.982840][ T8671] loop6: detected capacity change from 0 to 512 [ 213.989599][ T8671] msdos: Unknown parameter 'dot3' [ 214.168389][ T2237] hsr_slave_0: left promiscuous mode [ 214.176076][ T2237] hsr_slave_1: left promiscuous mode [ 214.182642][ T8662] loop6: detected capacity change from 0 to 512 [ 214.208024][ T2237] veth1_macvtap: left promiscuous mode [ 214.221913][ T2237] veth0_macvtap: left promiscuous mode [ 214.250571][ T2237] veth1_vlan: left promiscuous mode [ 214.256253][ T2237] veth0_vlan: left promiscuous mode [ 214.299735][ T8662] EXT4-fs (loop6): 1 orphan inode deleted [ 214.315163][ T8662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.358529][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.435266][ T2237] team0 (unregistering): Port device team_slave_1 removed [ 214.445199][ T2237] team0 (unregistering): Port device team_slave_0 removed [ 214.479998][ T36] smc: removing ib device lyz2 [ 214.500050][ T3496] lo speed is unknown, defaulting to 1000 [ 214.515311][ T3496] lyz2: Port: 1 Link DOWN [ 214.550506][ T8678] syzkaller0: entered promiscuous mode [ 214.563790][ T8678] syzkaller0: entered allmulticast mode [ 214.611845][ T8697] pimreg: entered allmulticast mode [ 214.618030][ T8697] pimreg: left allmulticast mode [ 214.999330][ T8707] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 215.080556][ T8629] chnl_net:caif_netlink_parms(): no params data found [ 215.382858][ T8629] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.431245][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.466103][ T8629] bridge_slave_0: entered allmulticast mode [ 215.492300][ T8629] bridge_slave_0: entered promiscuous mode [ 215.521331][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.574818][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.582127][ T8629] bridge_slave_1: entered allmulticast mode [ 215.609967][ T8629] bridge_slave_1: entered promiscuous mode [ 215.680029][ T8730] lo: Caught tx_queue_len zero misconfig [ 215.686147][ T8730] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1434'. [ 215.692590][ T8719] loop6: detected capacity change from 0 to 1024 [ 215.711242][ T8719] EXT4-fs: inline encryption not supported [ 215.725260][ T8719] EXT4-fs (loop6): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 215.739716][ T8629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.759171][ T8735] netlink: 'syz.5.1435': attribute type 10 has an invalid length. [ 215.788279][ T8629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.821352][ T8735] loop5: detected capacity change from 0 to 2048 [ 215.850599][ T8629] team0: Port device team_slave_0 added [ 215.857999][ T8629] team0: Port device team_slave_1 added [ 215.897113][ T8719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.947755][ T8629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.955243][ T8629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.982574][ T8629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.996122][ T8629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.003195][ T8629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.030167][ T8629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.087722][ T8629] hsr_slave_0: entered promiscuous mode [ 216.093905][ T8629] hsr_slave_1: entered promiscuous mode [ 216.099978][ T8629] debugfs: 'hsr0' already exists in 'hsr' [ 216.105823][ T8629] Cannot create hsr debugfs directory [ 216.126779][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.196382][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 216.240301][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'. [ 216.321371][ T8629] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 216.335566][ T8629] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 216.348349][ T8629] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 216.357673][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 216.357690][ T28] audit: type=1400 audit(1776307586.517:5395): avc: denied { read } for pid=8760 comm="syz.6.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.364441][ T8629] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 216.400251][ T28] audit: type=1400 audit(1776307586.547:5396): avc: denied { read } for pid=8777 comm="syz.2.1443" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 216.428624][ T28] audit: type=1400 audit(1776307586.547:5397): avc: denied { open } for pid=8777 comm="syz.2.1443" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 216.521844][ T8629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.552470][ T8629] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.576990][ T2237] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.584188][ T2237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.598566][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.605712][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.611813][ T8800] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 216.665798][ T8800] loop0: detected capacity change from 0 to 2048 [ 216.776542][ T8629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.902181][ T28] audit: type=1400 audit(1776307587.057:5398): avc: denied { setopt } for pid=8827 comm="syz.0.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.016147][ T8840] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 217.053966][ T8629] veth0_vlan: entered promiscuous mode [ 217.070213][ T8629] veth1_vlan: entered promiscuous mode [ 217.127898][ T8849] netlink: 'syz.5.1455': attribute type 4 has an invalid length. [ 217.132764][ T8629] veth0_macvtap: entered promiscuous mode [ 217.173878][ T8851] netlink: 'syz.0.1456': attribute type 10 has an invalid length. [ 217.219588][ T8629] veth1_macvtap: entered promiscuous mode [ 217.252176][ T28] audit: type=1400 audit(1776307587.396:5399): avc: denied { lock } for pid=8848 comm="syz.5.1455" path="socket:[22647]" dev="sockfs" ino=22647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.262733][ T8851] loop0: detected capacity change from 0 to 2048 [ 217.281913][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.286702][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.305892][ T319] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.317256][ T319] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.358483][ T319] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.371620][ T8855] loop6: detected capacity change from 0 to 2048 [ 217.382179][ T319] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.411653][ T8855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.442503][ T28] audit: type=1400 audit(1776307587.596:5400): avc: denied { mount } for pid=8629 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 217.575808][ T28] audit: type=1400 audit(1776307587.726:5401): avc: denied { setopt } for pid=8868 comm="syz.7.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.598164][ T8859] loop2: detected capacity change from 0 to 512 [ 217.653669][ T8873] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 217.681140][ T8873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.695496][ T8859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.704417][ T8873] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.724343][ T8859] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.724573][ T8873] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 217.724592][ T8873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1460'. [ 217.724614][ T8873] batadv0: entered promiscuous mode [ 217.724631][ T8873] batadv0: entered allmulticast mode [ 217.787825][ T8873] bond0: (slave batadv0): Releasing backup interface [ 217.793468][ T8859] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1457: corrupted xattr block 33: invalid ea_ino [ 217.817483][ T8859] EXT4-fs (loop2): Remounting filesystem read-only [ 217.824700][ T8859] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 217.826883][ T8873] bridge0: port 2(batadv0) entered blocking state [ 217.849540][ T8873] bridge0: port 2(batadv0) entered disabled state [ 217.860484][ T8859] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 217.867090][ T8879] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 217.882951][ T8859] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 217.894035][ T28] audit: type=1400 audit(1776307588.036:5402): avc: denied { write } for pid=8857 comm="syz.2.1457" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 217.923639][ T8873] netlink: 'syz.0.1460': attribute type 6 has an invalid length. [ 217.935847][ T28] audit: type=1400 audit(1776307588.086:5403): avc: denied { setattr } for pid=8857 comm="syz.2.1457" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 217.965406][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1460'. [ 218.003078][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.012939][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.101632][ T8889] loop2: detected capacity change from 0 to 512 [ 218.137357][ T8889] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.153481][ T8889] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 218.162673][ T8889] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 218.178757][ T8889] System zones: 0-2, 18-18, 34-34 [ 218.184311][ T8889] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1465: bad orphan inode 15 [ 218.195037][ T8889] loop2: lost filesystem error report for type 5 error -117 [ 218.195332][ T8889] ext4_test_bit(bit=14, block=18) = 1 [ 218.202699][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 218.202738][ C1] EXT4-fs (loop2): initial error at time 1776307588: ext4_orphan_get:1423 [ 218.202766][ C1] EXT4-fs (loop2): last error at time 1776307588: ext4_orphan_get:1423 [ 218.231918][ T8889] is_bad_inode(inode)=0 [ 218.236338][ T8889] NEXT_ORPHAN(inode)=2264924160 [ 218.241212][ T8889] max_ino=32 [ 218.244477][ T8889] i_nlink=0 [ 218.248110][ T8889] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.1465: corrupted inode contents [ 218.261648][ T8889] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.263710][ T8889] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #15: comm syz.2.1465: mark_inode_dirty error [ 218.284312][ T8889] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.285920][ T8889] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.1465: corrupted inode contents [ 218.308457][ T8889] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.308666][ T8889] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.1465: mark_inode_dirty error [ 218.332806][ T8889] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.332979][ T8889] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.1465: mark inode dirty (error -117) [ 218.337120][ T8899] FAULT_INJECTION: forcing a failure. [ 218.337120][ T8899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.350061][ T8889] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.355480][ T8899] CPU: 1 UID: 0 PID: 8899 Comm: syz.6.1467 Tainted: G W syzkaller #0 PREEMPT(full) [ 218.355587][ T8899] Tainted: [W]=WARN [ 218.355609][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.355640][ T8899] Call Trace: [ 218.355661][ T8899] [ 218.355684][ T8899] __dump_stack+0x1d/0x30 [ 218.355819][ T8899] dump_stack_lvl+0x95/0xd0 [ 218.355904][ T8899] dump_stack+0x15/0x1b [ 218.355978][ T8899] should_fail_ex+0x263/0x280 [ 218.356026][ T8899] should_fail+0xb/0x20 [ 218.356190][ T8899] should_fail_usercopy+0x1a/0x20 [ 218.356321][ T8899] _copy_from_user+0x1c/0xb0 [ 218.356423][ T8899] sctp_getsockopt_delayed_ack+0x5f/0x500 [ 218.356535][ T8899] ? selinux_socket_getsockopt+0x192/0x1c0 [ 218.356650][ T8899] sctp_getsockopt+0x749/0xaa0 [ 218.356724][ T8899] sock_common_getsockopt+0x60/0x70 [ 218.356812][ T8899] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 218.356971][ T8899] do_sock_getsockopt+0x1c4/0x210 [ 218.357086][ T8899] __x64_sys_getsockopt+0x11d/0x1a0 [ 218.357199][ T8899] x64_sys_call+0x2dcf/0x3020 [ 218.357309][ T8899] do_syscall_64+0x12c/0x370 [ 218.357474][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.357547][ T8899] RIP: 0033:0x7ff28833c819 [ 218.357613][ T8899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.357677][ T8899] RSP: 002b:00007ff286d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 218.357756][ T8899] RAX: ffffffffffffffda RBX: 00007ff2885b6090 RCX: 00007ff28833c819 [ 218.357837][ T8899] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 218.357886][ T8899] RBP: 00007ff286d6e090 R08: 0000200000000040 R09: 0000000000000000 [ 218.357921][ T8899] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.357971][ T8899] R13: 00007ff2885b6128 R14: 00007ff2885b6090 R15: 00007fff98383bb8 [ 218.358033][ T8899] [ 218.412429][ T365] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 218.420554][ T8889] EXT4-fs warning (device loop2): ext4_evict_inode:285: xattr delete (err -117) [ 218.421521][ T365] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 218.429756][ T8889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.736030][ T28] audit: type=1400 audit(1776307588.885:5404): avc: denied { create } for pid=8901 comm="syz.0.1468" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 218.764446][ T8849] Set syz1 is full, maxelem 65536 reached [ 218.981271][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.023596][ T8921] loop0: detected capacity change from 0 to 1024 [ 219.039384][ T8924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.085694][ T8924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.168667][ T8928] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1477'. [ 219.289665][ T8935] loop2: detected capacity change from 0 to 8192 [ 219.638608][ T8940] xt_hashlimit: size too large, truncated to 1048576 [ 220.880640][ T8957] futex_wake_op: syz.6.1483 tries to shift op by -9; fix this program [ 220.904077][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 220.920030][ T8961] netlink: 'syz.7.1488': attribute type 10 has an invalid length. [ 220.992224][ T8966] loop7: detected capacity change from 0 to 2048 [ 221.160073][ T8961] team0: Port device netdevsim1 added [ 221.200757][ T8969] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1489'. [ 221.209791][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 221.225788][ T8971] netlink: 'syz.5.1491': attribute type 1 has an invalid length. [ 221.351987][ T8969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.370632][ T8980] SELinux: security policydb version 18 (MLS) not backwards compatible [ 221.380552][ T8980] SELinux: failed to load policy [ 221.435040][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.689664][ T8975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.751334][ T8981] bond0: (slave batadv1): Opening slave failed [ 221.934876][ T8991] loop6: detected capacity change from 0 to 1024 [ 221.968742][ T8999] loop7: detected capacity change from 0 to 512 [ 221.989067][ T8999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1498: iget: bad extra_isize 90 (inode size 256) [ 222.048103][ T8999] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 222.099761][ T8999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1498: error while reading EA inode 11 err=-117 [ 222.108977][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 222.109016][ C0] EXT4-fs (loop7): initial error at time 1776307592: ext4_xattr_inode_iget:441: inode 11 [ 222.109053][ C0] EXT4-fs (loop7): last error at time 1776307592: ext4_xattr_inode_iget:441: inode 11 [ 222.147987][ T8999] loop7: lost filesystem error report for type 5 error -117 [ 222.148232][ T8999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1498: iget: bad extra_isize 90 (inode size 256) [ 222.208895][ T8999] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 222.211089][ T8999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1498: error while reading EA inode 11 err=-117 [ 222.237654][ T9002] loop5: detected capacity change from 0 to 8192 [ 222.244083][ T8999] loop7: lost filesystem error report for type 5 error -117 [ 222.244312][ T8999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.1498: iget: bad extra_isize 90 (inode size 256) [ 222.265904][ T8999] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 222.267621][ T8999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1498: error while reading EA inode 18 err=-117 [ 222.308849][ T8999] loop7: lost filesystem error report for type 5 error -117 [ 222.309069][ T8999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.1498: iget: bad extra_isize 90 (inode size 256) [ 222.398893][ T8999] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 222.434995][ T9012] loop0: detected capacity change from 0 to 1024 [ 222.475205][ T8999] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1498: error while reading EA inode 18 err=-117 [ 222.497814][ T8999] loop7: lost filesystem error report for type 5 error -117 [ 222.499261][ T8999] EXT4-fs (loop7): 1 orphan inode deleted [ 222.589953][ T9015] xt_hashlimit: size too large, truncated to 1048576 [ 223.054822][ T9017] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 223.130797][ T9012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.159844][ T9025] loop2: detected capacity change from 0 to 1024 [ 223.167190][ T9025] EXT4-fs: Ignoring removed orlov option [ 223.328023][ T9025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.480925][ T8999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.593772][ T9012] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.615069][ T8629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.666305][ T9012] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: comm syz.0.1502: lblock 0 mapped to illegal pblock 0 (length 1) [ 223.698672][ T9012] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 223.729731][ T9012] EXT4-fs (loop0): This should not happen!! Data will be lost [ 223.729731][ T9012] [ 223.763340][ T9034] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1502: bg 0: block 112: padding at end of block bitmap is not set [ 223.810094][ T28] kauditd_printk_skb: 185 callbacks suppressed [ 223.810112][ T28] audit: type=1400 audit(1776307593.952:5590): avc: denied { create } for pid=9031 comm="syz.5.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.336375][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.424699][ T9042] loop2: detected capacity change from 0 to 128 [ 224.453879][ T28] audit: type=1400 audit(1776307594.601:5591): avc: denied { mount } for pid=9041 comm="syz.2.1506" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 224.483951][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 224.504492][ T28] audit: type=1400 audit(1776307594.631:5592): avc: denied { read } for pid=9041 comm="syz.2.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.584149][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1507'. [ 224.621244][ T28] audit: type=1400 audit(1776307594.771:5593): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 224.735014][ T9052] loop2: detected capacity change from 0 to 128 [ 224.767429][ T28] audit: type=1400 audit(1776307594.911:5594): avc: denied { watch } for pid=9051 comm="syz.2.1509" path="/302/file0/file0" dev="loop2" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 224.810563][ T28] audit: type=1400 audit(1776307594.911:5595): avc: denied { remount } for pid=9051 comm="syz.2.1509" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 224.831476][ T28] audit: type=1400 audit(1776307594.961:5596): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 224.895942][ T9054] loop2: detected capacity change from 0 to 1764 [ 224.965822][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 225.071548][ T28] audit: type=1400 audit(1776307595.211:5597): avc: denied { ioctl } for pid=9056 comm="syz.0.1511" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 225.743703][ T9060] loop2: detected capacity change from 0 to 2048 [ 225.792232][ T9060] loop2: p3 p4 < > [ 225.796176][ T9060] loop2: p3 size 3724541952 extends beyond EOD, truncated [ 225.864483][ T9062] syzkaller0: entered promiscuous mode [ 225.870200][ T9062] syzkaller0: entered allmulticast mode [ 226.018930][ T9070] loop6: detected capacity change from 0 to 8192 [ 226.132692][ T9074] netlink: 'syz.2.1516': attribute type 10 has an invalid length. [ 226.156739][ T9074] loop2: detected capacity change from 0 to 2048 [ 226.535861][ T9083] loop0: detected capacity change from 0 to 256 [ 226.631314][ T9083] FAT-fs (loop0): bogus number of directory entries (2) [ 226.651667][ T9083] FAT-fs (loop0): Can't find a valid FAT filesystem [ 226.687074][ T9083] vhci_hcd vhci_hcd.0: invalid port number 236 [ 226.696070][ T9083] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 227.231605][ T28] audit: type=1326 audit(1776307597.370:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.6.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28833c819 code=0x7ffc0000 [ 227.255309][ T28] audit: type=1326 audit(1776307597.370:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.6.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28833c819 code=0x7ffc0000 [ 227.325619][ T9111] loop6: detected capacity change from 0 to 512 [ 227.338091][ T9111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.351278][ T9111] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.439190][ T9124] No such timeout policy "syz1" [ 227.479810][ T9124] loop0: detected capacity change from 0 to 1024 [ 227.508571][ T9124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.540603][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.582635][ T9134] loop0: detected capacity change from 0 to 128 [ 227.590325][ T9044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.630693][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.656331][ T9133] FAT-fs (loop0): Filesystem has been set read-only [ 227.664704][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.674439][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.686701][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.701523][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.704126][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.719797][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.728389][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.736960][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.745680][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.754607][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.763133][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.771825][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.780339][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.789610][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.798298][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.807057][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.819924][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.830083][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.838830][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.849863][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.858524][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.867394][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.876725][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.886005][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.919018][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.939906][ T9151] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 227.948420][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.960692][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.963549][ T9151] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 227.969628][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.985844][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 227.994409][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.003007][ T9133] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.012820][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.021338][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.027745][ T9151] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1530: bad orphan inode 4 [ 228.040265][ T9151] loop5: lost filesystem error report for type 5 error -117 [ 228.040646][ T9151] EXT4-fs (loop5): Remounting filesystem read-only [ 228.048038][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 228.048063][ C1] EXT4-fs (loop5): initial error at time 1776307598: ext4_orphan_get:1423 [ 228.048084][ C1] EXT4-fs (loop5): last error at time 1776307598: ext4_orphan_get:1423 [ 228.057089][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.061365][ T9151] EXT4-fs (loop5): 1 orphan inode deleted [ 228.092902][ T9151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.112648][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.121151][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.130611][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.149520][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.158237][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.159162][ T4976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.167005][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.185127][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.194189][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.202865][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.211566][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.220259][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.228934][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.245663][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.256158][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.265335][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.286051][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.303714][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.321236][ T9134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 228.432930][ T9167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.527270][ T9178] bridge0: port 1(batadv1) entered blocking state [ 228.538686][ T9178] bridge0: port 1(batadv1) entered disabled state [ 228.545630][ T9178] batadv1: entered allmulticast mode [ 228.551670][ T9178] batadv1: entered promiscuous mode [ 228.615959][ T9185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.656268][ T9185] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.1536: bit already cleared for inode 11 [ 228.690977][ T9190] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 228.761790][ T9185] loop2: lost filesystem error report for type 5 error -117 [ 228.762213][ T9185] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 228.769695][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 228.769713][ C0] EXT4-fs (loop2): initial error at time 1776307598: ext4_free_inode:354 [ 228.769740][ C0] EXT4-fs (loop2): last error at time 1776307598: ext4_free_inode:354 [ 228.825593][ T9190] EXT4-fs (loop6): 1 truncate cleaned up [ 228.831778][ T9190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.852006][ T9185] loop2: lost filesystem error report for type 5 error -117 [ 228.852215][ T9185] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 228.887167][ T9185] loop2: lost filesystem error report for type 5 error -117 [ 229.017370][ T9185] EXT4-fs (loop2): 1 orphan inode deleted [ 229.034914][ T365] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 229.044238][ T365] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 229.104431][ T9185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.405201][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.501340][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 229.501355][ T28] audit: type=1400 audit(1776307599.638:5673): avc: denied { append } for pid=9208 comm="syz.5.1542" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.539357][ T9206] set_capacity_and_notify: 4 callbacks suppressed [ 229.539377][ T9206] loop2: detected capacity change from 0 to 512 [ 229.642422][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.643529][ T28] audit: type=1400 audit(1776307599.658:5674): avc: denied { compute_member } for pid=9205 comm="syz.2.1541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 229.822621][ T9235] loop0: detected capacity change from 0 to 512 [ 229.838011][ T9233] bridge2: entered promiscuous mode [ 229.843298][ T9233] bridge2: entered allmulticast mode [ 229.895836][ T9243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9243 comm=syz.7.1552 [ 229.922126][ T9235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.941361][ T9243] FAULT_INJECTION: forcing a failure. [ 229.941361][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.955919][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.7.1552 Tainted: G W syzkaller #0 PREEMPT(full) [ 229.956023][ T9243] Tainted: [W]=WARN [ 229.956030][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.956042][ T9243] Call Trace: [ 229.956048][ T9243] [ 229.956056][ T9243] __dump_stack+0x1d/0x30 [ 229.956088][ T9243] dump_stack_lvl+0x95/0xd0 [ 229.956118][ T9243] dump_stack+0x15/0x1b [ 229.956183][ T9243] should_fail_ex+0x263/0x280 [ 229.956298][ T9243] should_fail+0xb/0x20 [ 229.956329][ T9243] should_fail_usercopy+0x1a/0x20 [ 229.956407][ T9243] _copy_from_user+0x1c/0xb0 [ 229.956450][ T9243] ___sys_sendmsg+0xc1/0x1e0 [ 229.956515][ T9243] __x64_sys_sendmsg+0xd4/0x160 [ 229.956667][ T9243] x64_sys_call+0x194c/0x3020 [ 229.956694][ T9243] do_syscall_64+0x12c/0x370 [ 229.956807][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.956828][ T9243] RIP: 0033:0x7f0b46c2c819 [ 229.956866][ T9243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.956889][ T9243] RSP: 002b:00007f0b45687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.956966][ T9243] RAX: ffffffffffffffda RBX: 00007f0b46ea5fa0 RCX: 00007f0b46c2c819 [ 229.956985][ T9243] RDX: 0000000020008010 RSI: 0000200000000080 RDI: 0000000000000004 [ 229.956999][ T9243] RBP: 00007f0b45687090 R08: 0000000000000000 R09: 0000000000000000 [ 229.957054][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.957118][ T9243] R13: 00007f0b46ea6038 R14: 00007f0b46ea5fa0 R15: 00007ffc4833f118 [ 229.957145][ T9243] [ 230.159760][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.194403][ T9254] loop7: detected capacity change from 0 to 164 [ 230.202167][ T9254] FAULT_INJECTION: forcing a failure. [ 230.202167][ T9254] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 230.227431][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.7.1554 Tainted: G W syzkaller #0 PREEMPT(full) [ 230.227463][ T9254] Tainted: [W]=WARN [ 230.227470][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.227554][ T9254] Call Trace: [ 230.227566][ T9254] [ 230.227576][ T9254] __dump_stack+0x1d/0x30 [ 230.227612][ T9254] dump_stack_lvl+0x95/0xd0 [ 230.227638][ T9254] dump_stack+0x15/0x1b [ 230.227695][ T9254] should_fail_ex+0x263/0x280 [ 230.227733][ T9254] should_fail_alloc_page+0xf2/0x100 [ 230.227769][ T9254] __alloc_frozen_pages_noprof+0x108/0x360 [ 230.227820][ T9254] alloc_pages_mpol+0xb3/0x260 [ 230.227902][ T9254] alloc_pages_noprof+0x8f/0x140 [ 230.227941][ T9254] ? __pfx_isofs_lookup+0x10/0x10 [ 230.227969][ T9254] isofs_lookup+0x3c/0x920 [ 230.228035][ T9254] ? d_alloc_parallel+0xc01/0xce0 [ 230.228095][ T9254] ? __rcu_read_unlock+0x4e/0x70 [ 230.228122][ T9254] ? __d_lookup+0x316/0x340 [ 230.228167][ T9254] ? __pfx_isofs_lookup+0x10/0x10 [ 230.228191][ T9254] path_openat+0xbf0/0x2050 [ 230.228227][ T9254] do_file_open+0x16c/0x290 [ 230.228289][ T9254] do_sys_openat2+0x94/0x130 [ 230.228322][ T9254] __x64_sys_openat+0xf2/0x120 [ 230.228493][ T9254] x64_sys_call+0x1e39/0x3020 [ 230.228529][ T9254] do_syscall_64+0x12c/0x370 [ 230.228564][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.228587][ T9254] RIP: 0033:0x7f0b46c2c819 [ 230.228768][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.228787][ T9254] RSP: 002b:00007f0b45687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.228807][ T9254] RAX: ffffffffffffffda RBX: 00007f0b46ea5fa0 RCX: 00007f0b46c2c819 [ 230.228823][ T9254] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 230.228841][ T9254] RBP: 00007f0b45687090 R08: 0000000000000000 R09: 0000000000000000 [ 230.228856][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.228868][ T9254] R13: 00007f0b46ea6038 R14: 00007f0b46ea5fa0 R15: 00007ffc4833f118 [ 230.228965][ T9254] [ 230.540951][ T9262] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1555'. [ 230.581998][ T9262] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 230.829353][ T9265] netlink: 'syz.5.1557': attribute type 10 has an invalid length. [ 230.938630][ T9265] loop5: detected capacity change from 0 to 2048 [ 231.119756][ T9268] loop6: detected capacity change from 0 to 1024 [ 231.128399][ T9268] EXT4-fs: Ignoring removed bh option [ 231.144804][ T9273] pim6reg: entered allmulticast mode [ 231.151543][ T9273] pim6reg: left allmulticast mode [ 231.166114][ T9268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.179432][ T9268] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.266765][ T28] audit: type=1400 audit(1776307601.417:5675): avc: denied { mount } for pid=9279 comm="syz.0.1562" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 231.331364][ T9284] lo speed is unknown, defaulting to 1000 [ 231.354884][ T9284] lo speed is unknown, defaulting to 1000 [ 231.360984][ T9284] lo speed is unknown, defaulting to 1000 [ 231.392124][ T28] audit: type=1400 audit(1776307601.437:5676): avc: denied { execute } for pid=9279 comm="syz.0.1562" dev="hugetlbfs" ino=23285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 231.430383][ T9289] loop2: detected capacity change from 0 to 128 [ 231.478015][ T28] audit: type=1400 audit(1776307601.437:5677): avc: denied { execute_no_trans } for pid=9279 comm="syz.0.1562" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=23285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 231.542923][ T9287] loop0: detected capacity change from 0 to 1024 [ 231.550878][ T28] audit: type=1326 audit(1776307601.677:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.7.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b46c2c819 code=0x0 [ 231.562777][ T9284] infiniband syz0: set active [ 231.624768][ T9284] infiniband syz0: added lo [ 231.634962][ T9284] syz0: rxe_create_qp: returned err = -2 [ 231.656865][ T9284] infiniband syz0: Couldn't create ib_mad QP1 [ 231.663264][ T9284] infiniband syz0: Couldn't open port 1 [ 231.682380][ T9284] RDS/IB: syz0: added [ 231.686651][ T9284] smc: adding ib device syz0 with port count 1 [ 231.693275][ T9284] smc: ib device syz0 port 1 has no pnetid [ 231.699787][ T805] lo speed is unknown, defaulting to 1000 [ 231.714454][ T9287] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 231.723426][ T9297] loop2: detected capacity change from 0 to 32768 [ 231.723542][ T10] lo speed is unknown, defaulting to 1000 [ 231.724452][ T9284] lo speed is unknown, defaulting to 1000 [ 231.772867][ T9287] System zones: [ 231.772870][ T3307] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 231.776627][ T3307] loop2: p1 start 460800 is beyond EOD, truncated [ 231.776655][ T3307] loop2: p2 size 83886080 extends beyond EOD, truncated [ 231.800303][ T9287] 0-1, 3-36 [ 231.805227][ T3307] loop2: p5 start 460800 is beyond EOD, truncated [ 231.805251][ T3307] loop2: p6 size 83886080 extends beyond EOD, truncated [ 231.823129][ T9297] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 231.828502][ T9297] loop2: p1 start 460800 is beyond EOD, truncated [ 231.830208][ T9284] lo speed is unknown, defaulting to 1000 [ 231.835026][ T9297] loop2: p2 size 83886080 extends beyond EOD, truncated [ 231.838026][ T9297] loop2: p5 start 460800 is beyond EOD, truncated [ 231.854257][ T9297] loop2: p6 size 83886080 extends beyond EOD, truncated [ 231.877116][ T9287] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1564: bad orphan inode 134217728 [ 231.909372][ T9287] loop0: lost filesystem error report for type 5 error -117 [ 231.964178][ T9287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.973955][ T9284] lo speed is unknown, defaulting to 1000 [ 232.080516][ T9287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1564'. [ 232.098634][ T9284] lo speed is unknown, defaulting to 1000 [ 232.105121][ T365] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 6) [ 232.123268][ T365] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 232.136311][ T365] EXT4-fs (loop6): This should not happen!! Data will be lost [ 232.136311][ T365] [ 232.148730][ T365] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 232.173212][ T365] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 232.188452][ T365] EXT4-fs (loop6): This should not happen!! Data will be lost [ 232.188452][ T365] [ 232.199646][ T7210] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 232.212657][ T7210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 232.226642][ T9284] lo speed is unknown, defaulting to 1000 [ 232.341648][ T9308] bridge1: entered promiscuous mode [ 232.351225][ T9308] bridge1: entered allmulticast mode [ 232.423563][ T9312] loop2: detected capacity change from 0 to 1024 [ 232.454224][ T9312] EXT4-fs: test_dummy_encryption option not supported [ 232.465520][ T9317] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 232.514619][ T9318] loop7: detected capacity change from 0 to 8192 [ 232.624286][ T9321] netlink: 'syz.6.1574': attribute type 29 has an invalid length. [ 232.652932][ T9321] netlink: 'syz.6.1574': attribute type 29 has an invalid length. [ 232.725355][ T9328] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 232.780027][ T9328] EXT4-fs (loop2): 1 orphan inode deleted [ 232.788567][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.797760][ T319] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 232.813853][ T319] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 1 [ 232.845406][ T319] loop2: lost filesystem error report for type 5 error -117 [ 232.855353][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 232.869156][ C0] EXT4-fs (loop2): initial error at time 1776307602: ext4_release_dquot:7062 [ 232.869180][ T9328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.877960][ C0] EXT4-fs (loop2): last error at time 1776307602: ext4_release_dquot:7062 [ 232.912633][ T9334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.926618][ T9310] ================================================================== [ 232.934762][ T9310] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 232.942653][ T9310] [ 232.944995][ T9310] write to 0xffffea0005190b18 of 8 bytes by task 9318 on cpu 1: [ 232.952640][ T9310] __filemap_remove_folio+0x201/0x310 [ 232.958339][ T9310] filemap_remove_folio+0x6d/0x1d0 [ 232.963485][ T9310] truncate_inode_folio+0x42/0x50 [ 232.968554][ T9310] shmem_undo_range+0x26d/0xb10 [ 232.973441][ T9310] shmem_fallocate+0x881/0x920 [ 232.978235][ T9310] vfs_fallocate+0x3b6/0x450 [ 232.982860][ T9310] __x64_sys_fallocate+0x7a/0xd0 [ 232.987851][ T9310] x64_sys_call+0x298e/0x3020 [ 232.992568][ T9310] do_syscall_64+0x12c/0x370 [ 232.997204][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.003118][ T9310] [ 233.005464][ T9310] read to 0xffffea0005190b18 of 8 bytes by task 9310 on cpu 0: [ 233.013055][ T9310] folio_mapping+0xa1/0xe0 [ 233.017583][ T9310] evict_folios+0x2b79/0x35c0 [ 233.022291][ T9310] try_to_shrink_lruvec+0x81b/0xbf0 [ 233.027529][ T9310] shrink_lruvec+0x255/0x1c60 [ 233.032271][ T9310] shrink_node+0x67a/0x2130 [ 233.036804][ T9310] do_try_to_free_pages+0x408/0xc80 [ 233.042044][ T9310] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 233.047972][ T9310] try_charge_memcg+0x37e/0xa10 [ 233.052854][ T9310] obj_cgroup_charge_pages+0x23/0xc0 [ 233.058169][ T9310] __memcg_kmem_charge_page+0x9e/0x170 [ 233.063672][ T9310] __alloc_frozen_pages_noprof+0x18a/0x360 [ 233.069526][ T9310] alloc_pages_mpol+0xb3/0x260 [ 233.074329][ T9310] alloc_pages_noprof+0x8f/0x140 [ 233.079302][ T9310] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 233.085230][ T9310] __kvmalloc_node_noprof+0x3d4/0x650 [ 233.090670][ T9310] ip_set_alloc+0x24/0x30 [ 233.095035][ T9310] hash_netiface_create+0x282/0x740 [ 233.100354][ T9310] ip_set_create+0x3cf/0x970 [ 233.104963][ T9310] nfnetlink_rcv_msg+0x509/0x5d0 [ 233.109927][ T9310] netlink_rcv_skb+0x123/0x220 [ 233.114727][ T9310] nfnetlink_rcv+0x167/0x1720 [ 233.119447][ T9310] netlink_unicast+0x5c0/0x690 [ 233.124251][ T9310] netlink_sendmsg+0x5c8/0x6f0 [ 233.129033][ T9310] ____sys_sendmsg+0x563/0x5b0 [ 233.133837][ T9310] ___sys_sendmsg+0x195/0x1e0 [ 233.138544][ T9310] __x64_sys_sendmsg+0xd4/0x160 [ 233.143430][ T9310] x64_sys_call+0x194c/0x3020 [ 233.148167][ T9310] do_syscall_64+0x12c/0x370 [ 233.152785][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.158693][ T9310] [ 233.161029][ T9310] value changed: 0xffff88811bc19c18 -> 0x0000000000000000 [ 233.168148][ T9310] [ 233.170491][ T9310] Reported by Kernel Concurrency Sanitizer on: [ 233.176665][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.7.1570 Tainted: G W syzkaller #0 PREEMPT(full) [ 233.187619][ T9310] Tainted: [W]=WARN [ 233.191444][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.201515][ T9310] ================================================================== [ 233.266151][ T9328] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.467200][ T4976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.891682][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.