last executing test programs: 4m12.688314819s ago: executing program 32 (id=45): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2000, 0x4}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m14.50533799s ago: executing program 33 (id=1061): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x100000001, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x20000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r1, 0x301, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @void}}}, 0x24}}, 0x20000004) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"], 0xd0}, 0x480c4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000) 2m27.510011483s ago: executing program 1 (id=1864): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{}]}]}}, 0x0, 0x32, 0x0, 0x1, 0x590bfa79}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_socket_connect_nvme_tcp() close_range(r1, 0xffffffffffffffff, 0x2) ioctl(r0, 0x10001, 0x0) 2m27.427165048s ago: executing program 1 (id=1865): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x25b}, 0x3548}}}]}, 0x78}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x6b) r5 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r9) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf25020000000800020002000000080002000200000008000200020000546628000800010002000000e3aa6ec3f42fa87d39d905000000000000004bffa859fa58fe80b9c03bfb8ad1dfe58bea30a8c3d75876"], 0x34}}, 0x20000010) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000080)={r7, r8+60000000}, 0xfffffffffffffffe) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x40084) 2m26.611013645s ago: executing program 1 (id=1887): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") (fail_nth: 1) 2m25.695099959s ago: executing program 1 (id=1907): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") openat(r0, &(0x7f0000000040)='./file1\x00', 0x1172c2, 0xf0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x8, 0x8, 0x400, 0x100000000, 0x80}) syz_usb_connect(0x3, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000246e86908b8070a423da30102030109022d0001060220320904860403e9681b4009050200ff03019b0509050a000800d70913090500100002020c080cd0bfa846ba200051e77267ddc2c8659a198f18df6e7881e0cb09b96e0e8bb788593adbc89ecff4db01972f9a09101066aef4cbf63f2daa89589f5ed03d9561c695d2c1b2ab2c34dd8c3e7f10cdbc5e332ee769205f1b24aa1e44c23f3da6f4233901a5fa9ed8c72d055c42a47deedb1795bf81929745c8"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private0, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) ftruncate(0xffffffffffffffff, 0x2007ffb) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(r1, 0x0, r2, 0x0, 0x408cd, 0x0) read$nci(r1, &(0x7f00000006c0)=""/236, 0xec) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) sendfile(r3, r3, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7, 0x90000000}, &(0x7f00000000c0)=0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r6 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x330d, 0x1000, 0x4, 0x345, 0x0, r5}) r7 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000480), 0x1) io_uring_enter(r6, 0xffffe, 0x2, 0xf, 0x0, 0x0) syz_read_part_table(0x1055, &(0x7f0000001400)="$eJzszLFpw2AUBODTHwlJkA2yRzbJPipSZIyA5zJ4AtduzDOWZdAGLvx91Xscd+GlKi25VP/VMiVzkmvVmORzy6taS3Jav25XHJ/XUkOSj+Twl/TzfSfdsoWtzt8/a6+6MRn+59/pkRz3awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1m4BAAD//7rMFAM=") r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x49, 0x400, 0x0, 0x0, 0x100002, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6780000335a63bdbcef549ba197fce47ddfdd00000000000000000000a3c5c00c000000a000", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x6]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000600)={r4, @in6={{0xa, 0x4e24, 0xa, @mcast2, 0xa1}}, 0x9, 0x93, 0xba0, 0x1e, 0x20, 0x9985, 0xd}, &(0x7f00000001c0)=0x9c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) ftruncate(0xffffffffffffffff, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 2m22.805123346s ago: executing program 1 (id=1960): io_uring_setup(0x1fbb, &(0x7f00000005c0)={0x0, 0x4e4c, 0x20000, 0x4, 0x403d3}) gettid() r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/16], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x4040000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x2, r0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) clock_gettime(0x0, &(0x7f00000000c0)) mount(&(0x7f0000000280)=@sr0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='binfmt_misc\x00', 0x1000, &(0x7f0000000340)='\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x3, 0x6, {{0xa, 0x4, 0x2, 0x7, 0x28, 0x67, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xa1, 0x1, 0x6, [{@remote, 0x1}, {@local, 0x3}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r4, 0x25, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) pread64(r6, &(0x7f0000001440)=""/126, 0xb, 0x35) socket$nl_route(0x10, 0x3, 0x0) 2m22.038649821s ago: executing program 1 (id=1966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071124200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1400, 0x0, 0xffff6493, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fcf, 0x31300, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x54, 0x17, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x8000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="b40800000000000073119f00000000028510000002000000b7c9a3cfb0316551665bdeb30272e6bdbb6126cc5fa25c433ff2e039"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) close(0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_send_signal(0xffffffffffffffff, 0xe, 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x207) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x3ff, r7, 0x0, 0x6, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="04002dbd70000100000005400000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe3d, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x420000, 0x20) 2m22.031951741s ago: executing program 34 (id=1966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071124200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1400, 0x0, 0xffff6493, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fcf, 0x31300, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x54, 0x17, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x8000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="b40800000000000073119f00000000028510000002000000b7c9a3cfb0316551665bdeb30272e6bdbb6126cc5fa25c433ff2e039"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) close(0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_send_signal(0xffffffffffffffff, 0xe, 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x207) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x3ff, r7, 0x0, 0x6, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="04002dbd70000100000005400000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe3d, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x420000, 0x20) 1m55.631336501s ago: executing program 6 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080200001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) write$UHID_CREATE(r2, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/169, 0xa9, 0x5, 0x5b44, 0x4, 0x0, 0xa}}, 0x120) write$UHID_INPUT2(r2, &(0x7f0000000240), 0x6) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ea, 0x416180) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000140)=""/85) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, &(0x7f0000000a40), 0x0}, 0x20) 1m55.46185193s ago: executing program 6 (id=2095): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080200001"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="61889b84d5a9d8e500000000000000000a000000300001802c0001801400150000000004000000001306c23d200b1c88caa38cd71f2dd20000ffff0000001614000400ff010000000000000000000000000001"], 0x44}}, 0x74800) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xb) 1m55.324172038s ago: executing program 6 (id=2097): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 1m55.239808304s ago: executing program 6 (id=2098): unshare(0x24040400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180)=0x2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4810, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x8000}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000000000702000000", 0x18}], 0x1}, 0x0) 1m55.203576445s ago: executing program 6 (id=2100): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x46, &(0x7f0000000000), 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)="432a3d64fa10606da889cd0540abba1de2c24078203b06c36a70b483c96187be5a354400b100aaa63d68f04f7d74024bea5b91226f58daa17b715eb883604220b8102a0c5d53806071cf6628c188fde090710726e2e9c1c0af079679a6098eae22c9fddbbe9dbc842df517bc85ad13f2e0ba3c79a8c7869b2b9e000243fa1fe24274b05546daaace681127c41a2e8e9e831a0b1bd9b51317d59348a818d21e0b8189d8b77498e38c6596e7ad1c9d2bcd0f3768cd57bb6cd002196e43df78816aaad7e88eecd4", 0xc6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='cpu.stat\x00', 0x5000000, 0x0) sendfile(r6, r8, 0x0, 0xc484) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x2450, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_readahead}, {@access_any}]}}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r11 = syz_open_procfs(r5, &(0x7f0000000100)='sched\x00') write$UHID_GET_REPORT_REPLY(r11, &(0x7f0000000080)={0xa, {0x8, 0x80}}, 0xa) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}, 0x1c) 1m54.352638774s ago: executing program 6 (id=2110): unshare(0x24040400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180)=0x2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4810, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x8000}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x101091, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000000000702000000", 0x18}], 0x1}, 0x0) unshare(0x2040000) 1m54.288513489s ago: executing program 35 (id=2110): unshare(0x24040400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180)=0x2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4810, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x8000}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x101091, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000000000702000000", 0x18}], 0x1}, 0x0) unshare(0x2040000) 42.98916822s ago: executing program 5 (id=3429): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x80053, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2509, 0x2, @perf_bp={&(0x7f0000000640), 0x3}, 0x112144, 0x2, 0x3, 0x6, 0xd9f, 0x2, 0x5, 0x0, 0x80000, 0x0, 0x8000000000000001}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcdf25023020010067be982b35afb9650000000020000008000200ffffffff08000100ac1e0101"], 0x2c}}, 0x4040000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000580)={0x1, 0x2, 0x2, 0x80000001, r2}) ptrace(0x4207, r2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1000089, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}]}}) mmap(&(0x7f00004a9000/0x2000)=nil, 0x2000, 0x27ffff7, 0x13, r5, 0x1000) sendto$phonet(r0, &(0x7f0000000200)="dd8b799b0eaa57c54fb10f4a2291e596cc03cb167c678d4202b4e67904899299dab3bf4e5e3236d8818bf05344f3af0e9c3d4d329c140f84e8e4ddfb983ecccd7d1060cd1e7d362053a592e18afce73caceeec9a60a389ae9c678a529d4899a1b5e1e46a72f9e6117a091f80559145a54d1fa24261c9575fb1ff53fc84aeacc71d733043f5f7d818b96fac2a38e1af8ee3de96302b23bc19587f248102d763fd78a623cd8d0a91876a78415d409c672766bc6257b129997bb07471b719c582afe73a19ed7e258560fe9032bbc9cd848f82c6fe1a6cfd4d62de2a", 0xda, 0x4000000, &(0x7f0000000100)={0x23, 0x3, 0x4, 0x40}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffb, 0x39, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000140)="38c22f3076e38ef4b93ca6cd93e4fa042cff4703d85df793d87a821d8f7593f70433462fca33ab7ad83c0271d6ceb243d9b164e57ff95724fa", 0x0, 0x800004, 0x10030, 0x3, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00f2ff1d00000989c8ff401e95b9ea908df70588ae4b7b000000000000f5000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x8000000000000000) 42.739691554s ago: executing program 5 (id=3434): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000ff7f00000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000000da9d27783f2c4c4ab91dc90810000000", @ANYRES32=0x0, @ANYBLOB], 0x50) 42.698115716s ago: executing program 5 (id=3436): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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") r0 = creat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "e5d9373fadb467666c7dbf840c8cb2be"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rename(&(0x7f00000003c0)='./file3\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 42.530820726s ago: executing program 5 (id=3437): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x2, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000002100)) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_read_part_table(0x105e, &(0x7f0000001080)="$eJzsz7FRwzAYx9G/JR+2j2MQtmADKkoqChjDM7ABLdtkhWyRSjlHzgpJiveK73Q/naRTuK8yZ0kO78lLD1PWfWvN9PvUWk3yV3tqpebzuy5J6WFuydCXS8ZtZLiGyz1vX/O4HWyn5yTHn/K6v7uNj/8b/hQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtY5AAD//xu7Dyk=") getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000180)=0x9) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x2c, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="00101e5738ebf7"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="88"]}]}, 0x2c}], 0x1}, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x440c, &(0x7f0000000080), 0x6, 0x453, &(0x7f0000000ac0)="$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") ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000000c0)={0x4, 0x6, 0x3, 0x2, 0x1, 0x0, [{0x28, 0xfffffffffffffffd, 0x6, '\x00', 0x1}]}) 41.915070172s ago: executing program 5 (id=3449): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) 41.583485911s ago: executing program 5 (id=3452): socket$kcm(0x10, 0x2, 0x0) eventfd2(0x10001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000020ac0)=""/4107, 0x100b) 41.583075301s ago: executing program 36 (id=3452): socket$kcm(0x10, 0x2, 0x0) eventfd2(0x10001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000020ac0)=""/4107, 0x100b) 35.908520509s ago: executing program 0 (id=3535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000070900010073797a30"], 0x34}}, 0x0) 35.825060075s ago: executing program 0 (id=3538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x100, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbff, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffff95}, {0x3}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x8000) 35.697083612s ago: executing program 0 (id=3541): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xe8, 0x0, 0x9, 0x80, 0x0, 0x4, 0x5c222, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x21, 0xff}, 0x4, 0x3, 0x0, 0x7, 0x8000000000000001, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000002740)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_io_uring_setup(0x5bf, &(0x7f00000003c0)={0x0, 0x1954, 0x300, 0x4}, &(0x7f00000000c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r5 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000200)=r5, 0x1) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x180, 0x12, 0x60a, 0x180, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [0x0, 0x0, 0xff], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffffffff, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8, 0x6, 0x59b25666, 'netbios-ns\x00', 'syz1\x00', {0x251}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x804}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffffffff, 0x1, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) modify_ldt$write2(0x11, 0x0, 0x0) 35.395126639s ago: executing program 0 (id=3548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000070900010073797a30"], 0x34}}, 0x0) 35.353728402s ago: executing program 0 (id=3550): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x1c1840, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0xfffffffc, 0x0) r2 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) syz_read_part_table(0x405a, &(0x7f0000000000)="$eJzszjFKA0EYBeC30SSjBkSwE4KLYCnaiNXeYi+QA1hZW7h4BQ8g2CxewWt4HUVERCJuEQsl31f9M/8b5oU/4nkosLv1MT2MksXjXpLDOt00SUmy+c2b07OMt0uVWZKr5XXbr94bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6oft+XrcXGQ7rrJxSyZTJPcbGTczKvsJ/XJ8F9tv2JZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDdne8MJe6P0jXzKiWpj9+vbp+SlzfL6dHnOEku79L2v9oXAHhlBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhgoAAP//AdIUYA==") r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@delchain={0x24, 0x65, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0xb}, {0xd, 0xfff1}, {0xf, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r8 = io_uring_setup(0x1612, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[r8]}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'syzkaller1\x00', @random="0003230c1100"}) mbind(&(0x7f0000f4a000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000140)=0x983, 0x6, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) shmat(r0, &(0x7f0000d6f000/0x3000)=nil, 0x6000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000400)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shmdt(r2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 34.803367783s ago: executing program 0 (id=3563): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) 20.301581824s ago: executing program 37 (id=3563): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) 17.7771588s ago: executing program 9 (id=3793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_INFO={0x6, 0x3, "7acc"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xa97) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e244e23030000005b0000"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20040000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000000)={0x0, 0x0, 0x1}) 17.656152127s ago: executing program 9 (id=3794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20c0, 0x78}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x17c, 0x1a, 0x8, 0x70bd28, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r0}, @nested={0x62, 0xf8, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @pid=r2}, @generic="f0082c5313fef3e5c55469b6dc8c1834733369589eb0c9aead83f4f182947a0ba0b3b4521c3c66fadcc7138b9b822f02ececff834a765f175cb6f5a83c3e62577c78fca7e2f842adb0952bb1791b362c7b16469894fe"]}, @typed={0x9, 0xd1, 0x0, 0x0, @str='\'\x02},\x00'}, @generic="bc50590751d011cf5e174074c6d21ba2471c5689dfeb559e9bfe5e6ecddb8545599346ee338d2566a46601c541226d158c71d81eb6b8a6d6c72852b9669b89ba1b80904966932b9f6d93abbad66dea6480b06201958b6f0e7a42060ece773b42043a428d26952e584aae07cc34799c502d619139dd53e63bbae4da8038e9a63c11fe09702e2fc429b70b81218c73404969254d8e5cfe09ae66095a5e1bf8835a4ca8590c77224029394c96e885868d8d12f6e703d2c245e28b766bf821fa1d9e1abd3008518c738f145f5ca0ecee15095e58f78d19f1ad759eebdd6ea240fab1524e85bad89728f54a3f919190cb"]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r1, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x48511b98, 0x2f}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x2, {0x1, 0x3, 0x8000}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44494) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000009c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x30c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xb}, @ETHTOOL_A_LINKMODES_OURS={0x1d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "59ae9943c5c5a18d5f0a66"}, @ETHTOOL_A_BITSET_MASK={0x3e, 0x5, "6f868b85a0fca494d0656287460f444107c31c84f7b0ed193d23df0ed78cfa2bf49c57f3c5898463784d0932de8d08764c77858364c2a65af776"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'\x02},\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb07}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'\x02},\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x95\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "f1bdaf510f3c0842fb52fb715dc2bdadb68c73e2450527a13e5b84c31ccbb0b623d1da937b84c51d05753efaf58f7cc63b89524898ef1f2fe6dd6d65f416d53c5b86175185724b3f591470aeb82de2d9c7a3e6e973d2"}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "22d63a407c48f0597d7298415f6c39cf71eadd5ee91e2fa5ef5c854f3624a0aa0691bb6058b51f49298ffc5adee7a592bff6abe76f1df4447386cc7ecdac87f9c841bb44f45bd5d6d18a56fcbafaae"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0x11c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "1e3c60d07dfbd02fc9a905dfc7d8d59a83066790fd680c1d3c1141ef4c6b40ec7b9605c0102da8df0b50220ae4c62bff3e149652c962f5b25841328450b57f125386f9f58e5e2e246e6876d05f60d5a69f54a6494cd1a699cda225c01663a3c6f6ec41da1c422a3d5cd37ca95113580b98e650a000cb0143d5b0d176b40e81bfba31092546f061f3ed1e5e6a5663f8eb951379d12beb79d8cb818f8060d88d32afddcff305c6c5f74b5faff0a7918b42e760bea3f596f98c5cffa1b8abe3bf53d6ad84b9e1943a7beaaccea966e72f17cb87620554bf8481ccca2658161714343801f4cc38768a571495f46df768ebef1a0b8846be41"}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "a5a2d4128729"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4010) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x7, 0x8, 0x2, 0x8001, {{0xb, 0x4, 0x2, 0x3, 0x2c, 0x68, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2, {[@rr={0x7, 0x17, 0x10, [@dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010101, @private=0xa010102, @multicast1, @private=0xa010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x7fffffff, 0x10001, {{0x30, 0x4, 0x3, 0x6, 0xc0, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0xd5, [@broadcast, @loopback, @remote, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}, @loopback]}, @ssrr={0x89, 0xb, 0x61, [@multicast2, @multicast1]}, @ssrr={0x89, 0xb, 0x85, [@loopback, @dev={0xac, 0x14, 0x14, 0x2f}]}, @timestamp_addr={0x44, 0x1c, 0x12, 0x1, 0x4, [{@empty, 0x4}, {@multicast2, 0x1bd7}, {@local, 0x7}]}, @ssrr={0x89, 0x2b, 0x47, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2, @broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x86, 0x3, 0x5, [{@multicast2, 0x7}, {@broadcast, 0x4}]}, @end, @lsrr={0x83, 0x13, 0xba, [@empty, @loopback, @multicast1, @broadcast]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x701, 0x8000, 0x9, 0x40, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x2, 0x0, 0xff, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x83, 0x4, "f9c3"}, @noop, @timestamp_prespec={0x44, 0xc, 0x10, 0x3, 0x0, [{@multicast2, 0xfffffffb}]}, @end, @ssrr={0x89, 0x7, 0x7a, [@private=0xa010101]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000d40)={@private1, 0x0}, &(0x7f0000000d80)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000dc0)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e00)={'veth1_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ec0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0x100, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000804}, 0x20001885) r13 = syz_genetlink_get_family_id$fou(&(0x7f00000010c0), r0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17.600442391s ago: executing program 9 (id=3795): r0 = inotify_init1(0x800) lseek(r0, 0x7, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x8000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000200)) open_by_handle_at(r1, 0x0, 0x10000) r2 = signalfd(r1, &(0x7f0000000280)={[0xe0000000000000]}, 0x8) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000300)=""/157, 0x9d}], 0x2, 0x9, 0x8baf) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x4010) socket$rxrpc(0x21, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x20, 0x1000, 0x9, 0x0, 0xc100, r2, 0x4c4e, '\x00', 0x0, r2, 0x4, 0x4, 0x1, 0x0, @value=r2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xf, &(0x7f0000001000)=@raw=[@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x4f, 0x3, 0x8, 0x2, 0x69f8}], &(0x7f0000001080)='syzkaller\x00', 0x1, 0x3a, &(0x7f00000010c0)=""/58, 0x41000, 0x45, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x3, 0x7f}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001200)=[r2, r2, 0xffffffffffffffff, r3, r2, r2, r2], &(0x7f0000001240)=[{0x2, 0x3, 0x2, 0x2}, {0x5, 0x3, 0xd, 0x7}, {0x2, 0x1, 0x8, 0x5}, {0x5, 0x2, 0x8, 0xa}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x2, 0xc, 0x4}, {0x0, 0x1, 0x4, 0x4}], 0x10, 0xfffff99f}, 0x94) io_uring_enter(r2, 0x3eb3, 0x5e0c, 0x2, &(0x7f0000001380)={[0x100000000]}, 0x8) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000013c0)={0x3, 0x8, "d380c6", 0x0, 0x1}) open_by_handle_at(r1, &(0x7f0000001400)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x100, 0x5, 0x7, 0x7}}, 0x441) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x967051d42d97aa12}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x2c}}, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000001580)=0x9) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x5, '\x00', 0x0, r2, 0x0, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x15, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0x8, 0x8, 0x2, 0x2, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000001680)='GPL\x00', 0x2, 0xfb, &(0x7f00000016c0)=""/251, 0x40f00, 0x55, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000017c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x4, 0x6, 0xfffffffb, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001940)=[r5, r2, 0xffffffffffffffff, r2], &(0x7f0000001980), 0x10, 0xfff}, 0x94) 17.538726754s ago: executing program 9 (id=3796): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4008040) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) rmdir(&(0x7f00000002c0)='./control\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r4, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r5, 0x0, 0x6cd, 0x0, &(0x7f0000001a00)) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x5) close(0x3) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r8, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, 0xffffffffffffffff, 0x2e, 0x4608, @void}, 0x10) openat$cgroup_ro(r6, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x275a, 0x0) 17.080204371s ago: executing program 9 (id=3799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000001580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000400)="b34715ecd04550d3abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.806515726s ago: executing program 9 (id=3802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x20de325edae1e8d6, 0xe, &(0x7f0000001780)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x64}], &(0x7f0000000200)='GPL\x00', 0x0, 0x51, &(0x7f0000001800)=""/81, 0x41000, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xd, 0x7, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001900)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001940)=[{0x3, 0x5, 0x8, 0x16}, {0x5, 0x1, 0xc, 0x26aec620f493aea1}, {0x4, 0x5, 0x5, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = timerfd_create(0x8, 0x0) read(r6, &(0x7f0000000380)=""/189, 0x8) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) r8 = msgget(0x1, 0x250) msgctl$IPC_SET(r8, 0x1, &(0x7f00000007c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8a, 0x4}, 0x0, 0x0, 0x5, 0x3, 0xfd, 0x4, 0x8000000000000000, 0xb, 0x100, 0x7fff}) timerfd_settime(r6, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r9 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) 16.722645401s ago: executing program 38 (id=3802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x20de325edae1e8d6, 0xe, &(0x7f0000001780)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x64}], &(0x7f0000000200)='GPL\x00', 0x0, 0x51, &(0x7f0000001800)=""/81, 0x41000, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xd, 0x7, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001900)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001940)=[{0x3, 0x5, 0x8, 0x16}, {0x5, 0x1, 0xc, 0x26aec620f493aea1}, {0x4, 0x5, 0x5, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = timerfd_create(0x8, 0x0) read(r6, &(0x7f0000000380)=""/189, 0x8) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) r8 = msgget(0x1, 0x250) msgctl$IPC_SET(r8, 0x1, &(0x7f00000007c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8a, 0x4}, 0x0, 0x0, 0x5, 0x3, 0xfd, 0x4, 0x8000000000000000, 0xb, 0x100, 0x7fff}) timerfd_settime(r6, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r9 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) 2.011512583s ago: executing program 2 (id=4055): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x2000, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 2.011188803s ago: executing program 2 (id=4056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@private2, @mcast2, @rand_addr=' \x01\x00', 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000006c0)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x6, 0x0, 0x6, 0x500, 0x4000000000000009, 0x710202}) (async) r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xc9c7, 0x4, 0x0, 0x9, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) close(0x3) 1.931690458s ago: executing program 7 (id=4058): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@local, 0x7fe, 0x2, 0x0, 0x5, 0x0, 0x9}, 0x20) 1.881573981s ago: executing program 2 (id=4059): r0 = inotify_init1(0x800) lseek(r0, 0x7, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x8000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000200)) open_by_handle_at(r1, 0x0, 0x10000) r2 = signalfd(r1, &(0x7f0000000280)={[0xe0000000000000]}, 0x8) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000300)=""/157, 0x9d}], 0x2, 0x9, 0x8baf) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b40)={0x3e0, 0x12, 0x400, 0x70bd25, 0x25dfdbff, {0x8, 0x1, 0x7, 0x9, {0x4e24, 0x4e23, [0x8, 0x101, 0xf4, 0x80000000], [0x8d, 0x387, 0x5, 0x10000], 0x0, [0x7, 0x2]}, 0x2, 0x98}, [@INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "ea50e6d50fba65e0c21d72a4e0299a69e13ff5b74460af9247063f35f630ed0cd315a8071a4a4ebf9aa6f8ab0dbb8e8c043c2e71558f8d1b65b534e18b5f3ede147a7e89c3dc9582bcc70cac3c7dc8faa488bf35895f59f567f14ced2a0a41b57b57c5b1c6cc517d7e5a409ea04a433e7a324ee477acb19a8ad293c5dc972e50da02b66626b1854bbc235581f60e9814e1c4a35abde486a8e9b4ccd3964266020cbd4fff11597a74243fa02d5260bd46ce963b9bae4130dc355b0514a897aea8695cc7b3f038784a6c35eb2abfc8a0de3523"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "94b80f6b4b68db2cd172123f0c2e92d48e8ade8f057e6e4bfda0cb48d1387b96d3dce7b124328c7614e45e5b9c952566c250073d075f72f8c942781face8c11a34a97abecfe94db4c987e3e8d2af942d7151cd7b02370cb2fc6e854956e757ac1a220f23ce74c6e3a3692703e47bd773364fc7f8595a280021e57e7420eda7a44a4122b5aecb2137ce8dc59293c600e8a0571510c625a9342fcf7bb1c55c12f1b98c05a8c01370"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "aa064759688c7814b72a27dc08f8b101da18d25ea4562727a74355039dbd1afeaae2d19c4e384d3d2b63a997f2cf6f2558e0b541b5fd9761ce90c8026d2aee672fd91a18a403360e8aa7d1582045c6ea72eeb39b"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "b1b3ef4692f430f80487c0907fe995c80df70b9b88c2e53277795239e9fdeb5672f95c08237d452574ec2b44168cad49b2feefde147b7f8803d4941721ff039afc5ff9f87ea43115b6ff6bb2cfa488f9ba58a226cfd82aab125562b3a66449379e40598f8f3d7f707a90c6313dd7b020492d75e34ddb04363781bf66a6df442d135108bb8d2e86cd69c2bce602de48340276c4450af3425947eee08d0b40b3327d4ad7d795fb131cad97b13713634f9f74e43b4aa73ae1c66cfd8d4918d752963fa25a92bb8e965dd49a6a5192a4f0a1e7dec3d3477a589f49c3e83c63587ee1df01"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "5f0f81539de2a50d0afb5051a29a18ca64ecab6adfce3dda81d30f876c7870beaad7f06f3e8e4899c475564903767bd8e2b9539426c15097d5ca460aace23c5956b71a808b49bb32240935f8b665ae225bd0f240edae3b56b30fc5a2cf4cf3c9f538c0bfd7e9a0e1d01f5b3f087143d9a96f0ed7fe387fb4cb2d6ae133fe6aff3a9c33f1b924d294343e0ba160c7b91643577778556f6427342d8cd17fe2016bf98789fd6d06513df755c9276875f0a102133d7ab5ec2cfdfe895aac18b98770ca98bb5b8f434d662e"}]}, 0x3e0}}, 0x4010) socket$rxrpc(0x21, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x20, 0x1000, 0x9, 0x0, 0xc100, r2, 0x4c4e, '\x00', 0x0, r2, 0x4, 0x4, 0x1, 0x0, @value=r2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xf, &(0x7f0000001000)=@raw=[@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x4f, 0x3, 0x8, 0x2, 0x69f8}], &(0x7f0000001080)='syzkaller\x00', 0x1, 0x3a, &(0x7f00000010c0)=""/58, 0x41000, 0x45, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x3, 0x7f}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001200)=[r2, r2, 0xffffffffffffffff, r3, r2, r2, r2], &(0x7f0000001240)=[{0x2, 0x3, 0x2, 0x2}, {0x5, 0x3, 0xd, 0x7}, {0x2, 0x1, 0x8, 0x5}, {0x5, 0x2, 0x8, 0xa}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x2, 0xc, 0x4}, {0x0, 0x1, 0x4, 0x4}], 0x10, 0xfffff99f}, 0x94) io_uring_enter(r2, 0x3eb3, 0x5e0c, 0x2, &(0x7f0000001380)={[0x100000000]}, 0x8) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000013c0)={0x3, 0x8, "d380c6", 0x0, 0x1}) open_by_handle_at(r1, &(0x7f0000001400)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x100, 0x5, 0x7, 0x7}}, 0x441) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x967051d42d97aa12}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x2c}}, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000001580)=0x9) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x5, '\x00', 0x0, r2, 0x0, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x15, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0x8, 0x8, 0x2, 0x2, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000001680)='GPL\x00', 0x2, 0xfb, &(0x7f00000016c0)=""/251, 0x40f00, 0x55, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000017c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x4, 0x6, 0xfffffffb, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001940)=[r5, r2, 0xffffffffffffffff, r2], &(0x7f0000001980), 0x10, 0xfff}, 0x94) 1.853596753s ago: executing program 7 (id=4060): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 1.799536616s ago: executing program 2 (id=4061): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000", @ANYRES16, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) r7 = syz_open_pts(r0, 0x0) dup3(r0, r7, 0x80000) r8 = dup3(r7, r0, 0x0) read$usbmon(r8, &(0x7f0000000340)=""/126, 0x7e) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, 0x0) 1.778199877s ago: executing program 7 (id=4063): r0 = socket(0xa, 0x3, 0x3a) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000540)={0x0, 0x0, 0x2, r4}, 0xc) 1.702645362s ago: executing program 7 (id=4066): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@ipv4_newroute={0xac, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x88, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x84, 0x1, {{0x2000, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfdfc}}, [@dev={0xfe, 0x80, '\x00', 0x41}, @dev={0xfe, 0x80, '\x00', 0xa}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local, @private0]}}}]}, 0xac}}, 0x0) 1.610083507s ago: executing program 7 (id=4069): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8488, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@data_err_ignore}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@barrier}]}, 0x1, 0x460, &(0x7f0000001200)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, 0x0, 0x48) r3 = socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) write(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa2000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/129) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x6, 0x1, 0x0, 'queue1\x00', 0x2}) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={0x0, 0xffffffa4}}, 0x0) 1.511014713s ago: executing program 7 (id=4072): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000400)=""/4096, 0x225000, 0x800, 0xf6}, 0x20) mkdir(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x4}], 0x1c) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800020000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40f9, 0xae, 0x0, 0x5, 0x0, 0x2000003}, r2, 0x0, 0xffffffffffffffff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r7, 0x4bfa, &(0x7f0000000080)=""/52) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/21, 0x15) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bd050000000000009a0c0000850000008900000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) unshare(0x18000000) 987.561153ms ago: executing program 2 (id=4081): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB="1281f3b500000000000008"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0xffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000004940)=[{{&(0x7f00000049c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0xf00) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000340)='net/sockstat6\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x40, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_clone(0x800000, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400)=r3, 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x104b29, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x30, 0x2, 0x2a}, 0x2c) 978.481403ms ago: executing program 3 (id=4082): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 895.822239ms ago: executing program 3 (id=4084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18004000000004000000000000000000711201000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 894.855619ms ago: executing program 3 (id=4085): r0 = socket$pptp(0x18, 0x1, 0x2) ftruncate(r0, 0x401) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x9, 0xe, 0xb57, 0x1, 0x6, 0x4a, 0x4}, 0x1c) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x0, 0x5a, [{{0x9, 0x4, 0x0, 0x44, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x1000, 0x9, 0x1, {0x22, 0x1a6}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x45, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8e, 0x5, 0xf}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0x6, 0x7, 0x10, 0x1}, 0x40, &(0x7f0000000140)={0x5, 0xf, 0x40, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xf4, 0x0, 0x3, 0x100, 0xb}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x6, 0x0, 0x8001}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7, 0xf000, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "279667c1eec0c4c45b7e239066cfd4c2"}]}, 0x6, [{0xea, &(0x7f0000000180)=@string={0xea, 0x3, "f311b5dba38d9d811c0c621bb096b4862f0a79c3599b6a66b0edaf89d28e03319e823f1c1409325ee37b754d2dd753dd828e9ec2ce527d2ff36d913982afbb736e7f856d7531b5f8204ebb829e155185773ca765fcffacf027b032af0c580678ecb9c7e10e7f140fc20f87e4109d960b54f084fdda84f130cbc1a01935ef3b745904fe9a9e60b9e55a4d382f3e4f5ff13906aab1926917527a8b14016aa13818d51d821b2c9455f814e38c6b94977c4f061133d152c3d6bba0def34ddc8ea02e1edfa3d68e58107159945be8034045343799f638cfc9506f898bd64a48d62fd025aa122f856fcfa7"}}, {0x3a, &(0x7f0000000280)=@string={0x3a, 0x3, "8a9d3bf1cec2b680e8f18d8771355f4a5ab2a8040759e7d0d7cafa861a4023ec0bc35e08104fbaafbe7f7dbaf450b71b1474ff55e8bc8c22"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x429}}, {0x40, &(0x7f0000000300)=@string={0x40, 0x3, "6b356b9d3b5ba8fd210904a507314426e5fba1362475327429f6f998c11686b3bc81b9c38909fa0e6f1f871bb0687a660cc1078ff6fc1c75f8928fe84b2d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}]}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x3, 0x18, 0x5, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x9, 0x8d, &(0x7f0000000540)=""/141, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x9, 0x6e}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0x7, 0x3}, {0x4, 0x1, 0x3, 0x7}, {0x2, 0x4, 0xb, 0x3}, {0x1, 0x3, 0x0, 0xc}, {0x3, 0x5, 0xa}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r0, 0xb, 0x1, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = creat(&(0x7f0000000940)='./file0\x00', 0x180) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r3, r2, 0x25, 0x10, @val=@tcx={@void, @value=r6, @void, @void, r5}}, 0x1c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff, 0x0}}, './file0\x00'}) getgroups(0x3, &(0x7f0000000b00)=[r9, r10, r12]) write$P9_RREADLINK(r6, &(0x7f0000000b40)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x100030, r11, 0x8000000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c00)={0x9}, 0x8) getpid() ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000c40)={'\x00', 0x8207}) r13 = syz_clone(0x80, &(0x7f0000000c80)="ccafc6971c8f948b950b5bac8fbbd7f787110be5ced6a05817e8b8324abb29f77df0006e83c4a7a22d2521c86bea9e7a5264b60e542c13369ce09700df7d644678772d71b4aeda1697e1d542326f2f0e4671f17cd7bc7c2b66e941049b4ccb7e4ca8389fcfc6178902d894ea9477f005b1d1933306beded164b8143498d299dda5afea89c0146143f58654c32dd07272d8", 0x91, &(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0)="6c7ae5a7f56705b93539dffccd65ed1075854cf8b7ef491c834d3cc39a05") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000e40)={0x0, &(0x7f0000000e00)}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e80)={r4, r2, 0x25, 0x1, @void}, 0x10) ioctl$sock_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000000ec0)) fcntl$getownex(r6, 0x10, &(0x7f0000000f00)={0x0, 0x0}) get_robust_list(r14, &(0x7f0000001080)=&(0x7f0000001040)={&(0x7f0000000f80)={&(0x7f0000000f40)}, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)}}, &(0x7f00000010c0)=0x18) r15 = syz_open_procfs$namespace(r13, &(0x7f0000001100)='ns/net\x00') quotactl_fd$Q_GETQUOTA(r15, 0xffffffff80000701, r8, &(0x7f0000001140)) r16 = socket(0x10, 0x1, 0x80000000) ioctl$BLKROSET(r6, 0x125d, &(0x7f00000011c0)=0x40) setsockopt$inet_sctp_SCTP_MAXSEG(r16, 0x84, 0xd, &(0x7f0000001340), 0x4) 820.407643ms ago: executing program 2 (id=4086): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101241, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='decodes '], 0xf) 787.874844ms ago: executing program 8 (id=4087): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001ed000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x42000, 0x0, 0x12, 0x100000c01, 0x74, 0x41, 0x24}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0xb081, 0x2a72, 0x7}) pipe(&(0x7f00000000c0)) name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x9, 0xfffffffc}, 0x7f, 0x2}}, &(0x7f00000002c0), 0x400) 599.557025ms ago: executing program 8 (id=4088): set_mempolicy(0x8006, 0x0, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @empty, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @loopback, 0x3}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x7, 0x0, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x42, 0x0, [{0x0, 0x10, "b4f6db7ef939984b6ca70f000000"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x2}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 371.716198ms ago: executing program 4 (id=4091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf251e0000000c000600000000000000000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000310", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c00060001000000010000005c002f800c0002000202aaaaaaaaaaaa08000100d13cffff18000380080004000b0000000c0005000500000000000000100003800c0005003a0900000000000008000100090000000c000200000000000000000008000100070000000c0006000300000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24040891}, 0x20004044) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="24004edb9871da955a937a9dc2d80000f514e0c54f4650080ee0a45a6919f5927ef96e8c9b58fa87f9cd5a27a9f2c91c208c65bab434f8ce7b43a541c83f7e9e4bf0e0bc260f5b9c1a9dc6ea453941fc0319702cad90582cc5b17ca729c8009579b1eaf60cd70b2cc868dc54d5afd65f1bf84362b1e76ec35705e366a7b8fee8ea48642ec6b200df226c830838680972b365cabd4e37136a107fd6737264bcb10387cc73a3040ee1a3d343cba33d6fe35cf93fee81961cf5e5fa2dd54e3e6b648486a3f4290df9aa45dd8af486327c7943973dcafc5ecd1da07eafb8215e8d9852521f0c5b76cf076de4d630ed74", @ANYRES16=r1, @ANYBLOB="00042cbd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x8040086) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x10, 0x2, {0x8}}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x50}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) dup3(r7, r9, 0x80000) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x48080) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff2e) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x2) ioctl$TCSETS(r10, 0x40087101, &(0x7f0000000040)={0x99d, 0x0, 0x1, 0x400000, 0x13, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, '\x00A\x00'}) r11 = syz_open_pts(r9, 0x0) r12 = dup3(r11, r9, 0x0) read$watch_queue(r12, &(0x7f0000000240)=""/173, 0xad) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000011a2dea8a3dc24329a282be5b0dfb6", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00'/28], 0x50) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x3, 0x7, 0x8, 0x0, 0x6, 0x2040, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0xffffffffffffff00, 0x8c}, 0x2, 0x3, 0x1, 0x0, 0x101, 0x7, 0x5, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x80108906, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 270.634424ms ago: executing program 3 (id=4092): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000240)='./file0\x00', r9}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000200)="c002084eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab400000092e588a84c82af9e9bbb", 0x12}], 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x10}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf, 0xa}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0xee, 0x1, 0x3d3f, 0x0, 0xfff, 0x4003, 0x58f}}]}}]}, 0x44}}, 0x24040084) 221.956917ms ago: executing program 4 (id=4093): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x9, 0x70bd27}, 0x14}}, 0x0) 153.214841ms ago: executing program 4 (id=4094): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 128.538923ms ago: executing program 8 (id=4095): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000000)="51f8bc2a4d95721c3fe946db33f17ca7fa033b73f988d4f03f283feaacb508134daa9770980eb26c6caf026a4a335aea7e70d4942a9a0d19416ddcc60e45f49e1be30af10ede226851667742b39da7c40b242858aac946588d48cdb110c668cc2df0b8c7fc7c503bc9eda2cfded3fc6f34f1b0f67a15e8195a3ac819115d4ec4339f0383f5f2a05e9e39df7b5387022d95c27cb01d08f6de239b903f7fdd83a1fc9e2d550bf6f1734dbdd13d24cadc3850eac6a05e7ed8849466dbd69dcc1e56792bf40a53fc50a7a638a2f8ddb3a1"}, {&(0x7f0000000100)="957b5bf6f7792f348ec7303e753835978e9eb2965d1fc7c652afee8b3cc4b6620eff496e969872575a75af2bcc7c027d15a9fd183c84a8fb96464e01fdf00795ee103c9431229c616239521ee323872c06c4237b1798e7405a792443b7afa5354ceeb5f20a822b0449b6d268658e400564060d5252d1a835dce9bfbfb469aff23ff691e96bcf9170e5d080fc22bd7692f4119ada8701c0e150dc9a8aa12b7ef318d27fe16fd5f020cde06f9bdd232cbc1b4fbe9f146da8d5ae27ba5d3308d25db63c3680c6e4a9295407a1996742baeea09eee50defcc6a570271cf5046bfa391b"}, {&(0x7f0000000200)="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"}], 0x1) 90.597715ms ago: executing program 8 (id=4096): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f00000001c0)) r2 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r2, 0x107, 0x2, &(0x7f0000000140)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000019000000040000000800000195"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 90.187115ms ago: executing program 3 (id=4097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0xa4, 0x0}, 0x0) 90.064135ms ago: executing program 4 (id=4098): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x4}, 0x20) 54.975287ms ago: executing program 3 (id=4099): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x6}, {}, 0x188, 0x0, 0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000380)="65ef4fcd016d7eee115bc2fec1410ce5c3220fac4a7ff41a502b446e9bf17709820a0ed9c9dc3e03523911f4185b8b4ff6f3e687b01df99969946034dffd086c8a1ebb01e05cb0e29867f705dcdc34345429691db22478ac89af7bec8ca5c0893a8fbb7ecf5cf68d55b2dc8de925661ff3386b810d20373e3a449a3302ce807a33a1b68c2f2dc5bd3807ece5d0de4b85b810b4ab7c7dac23c2db05aa038053d5d38a67b7a3614ce59d0187a611bba2b0159f55efe7436e10f2b72eb9d8d9e09655b47936a414c9cd59637481b4218abc5df7673f", 0xd4, 0x0, &(0x7f0000000580)={0x2, 0x123, {0x1, 0xc, 0xb8, "af6d5b08da2cc9321f87ec65d36036b1912dd76ff011e9b55da516cb99a456997ca202437b771dfb5980bf7fc0fa8cfd0ad85021c6b5c83034d408b4e5524a9b8093bcd8cc290296b159162b8340c8f20a24d600bb4ffd4492a89c861ccae6fbfc5050af004878d36b853454296531b6024bdc31958b7a9a520328e4b7214caab5c61689d65c465f135982312204bbced3a8a612d41056c2cf3055b16ac43a481c9293ff819f035d547d390ad7d9954cf538ef63d2f35bfb", 0x5e, "416362db739b150477435a1320eee4872f375b8befa507d52916d0f70d94df64fc61583d8f0d264d05bb12aba45bee89192bc3e1f2816aa72aafedc70a94cd7ca26454b1711115ca27842e8c3389291a322678510193468d8842212eec9f"}, 0xdf, "c6ad1df73d89ece8d9868228a3748cbee620de75a440758b2cced5ea06a0b57c3ab9c52168481358703da466d951b73eb4108a4ff8dbd70c658a3593a405ee3c3cd32b9030a815e4babea8261bbb3a6c81c835fc98189a61409f7d01b6f7c17ce0f752eaa73d9bc56eebdedf0b6fb4a22f6d535212c4b337d125639f388463659293253b60461dc99c8d99852d505b39c5b6e549c243b4a7b14f0062fcb33fede5300fb4b6c980496259808417d3a8390dbd50ee8134254f9332c1296f177b3a3a0cc445b156c5fa0d9497dd1745d319a997955a0c0f885aefbb4842d96919"}, 0x20e}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'ip6gretap0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4e, 0x81, 0x9, 0x7, 0x1, 0x1, 0x7f, 0x5, 0x2f, 0xb, 0xffffffea, 0x80, 0xabbf, 0x25, 0x4, 0x4, [0x3, 0x40]}}) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) open(0x0, 0x14927e, 0x20) fchmod(r2, 0x54) 54.704537ms ago: executing program 8 (id=4100): syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) 49.301377ms ago: executing program 4 (id=4101): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2], 0x28}}, 0x802) 974.3µs ago: executing program 4 (id=4102): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfffffffffffffff7, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chroot(&(0x7f0000000140)='./file0\x00') syz_open_dev$loop(&(0x7f0000000100), 0xe, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000007c0)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/136, 0x88}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f0000000640)=""/202, 0xca}], 0x7}}], 0x1, 0x2000, &(0x7f0000000840)={r1, r2+10000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x1c0, 0x30, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{0xa0, 0x1, [@m_mirred={0x9c, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1, 0xffffffffffffffff, 0x98, 0xc43}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x5, 0x8001, 0xaf4}, 0x2}}]}, {0x2e, 0x6, "cc81c7e04bd8de9bfd134ac033898f89eb6191b423db628fbaf263ee7f1fd41315f5ff44c44f55265e55"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x10c, 0x1, [@m_simple={0x108, 0x2, 0x0, 0x0, {{0xb}, {0xd8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa4, 0x3, '\xbb\xbb\x9b\xbb\xbb\xbbk\xf4\x92\x87#2S\x80\xc3\xf7\x8c\x1e\xba9\xaf}i\x9a\x01\x9f\x19\xe3\xbcw\x94\xb4\xef\x15\xc4\xd7b\xad N\xfe\xae\x01n\x98P\xb8\x12\x1d$\xb2\rF\xccW\x15\xf3\xcc\xb4\x15\a\xf1u\x88\xbc\xbb\xae\xfb\v A\x8aT\xdaD\x80\xddC\xedm4\xcb1\xde\x14\f\x15\xe6\x93\xb5v_\xcb\xf8\xf8a\xaa8\x8ba\xab\x94e\a\xa4\xc5\xdev#\x03e\xd1\xf2\x02\x82\xde~=\x87\x80g\x9c(\xf7\xf4\xe6\xd2\xdf\xd3%\xec\x8c\b6&\xa3\xad\x83\xae\x92\x14\xabh\xef\xdf\xd8gF\xd6\xc1-\xfbt\x13\x028\xda\xfb\\\xbc'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x2, 0x1, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x7, 0x9, 0x5}}]}, {0x5, 0x6, 'W'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f00000008c0)=0x5) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000bc0)={0xd, 0x1, 0x2}, 0x10) sendmmsg$inet(r4, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)='\a', 0x1}], 0x1, &(0x7f0000000b80)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003180)="99682fb8", 0x4}], 0x1}}], 0x3, 0x24044c41) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000940)=0x1, 0x4) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000900)=ANY=[@ANYBLOB="0415f0369003d34a48536e16d052822c597c645db27b97cd6d"], 0xd, 0x2) 0s ago: executing program 8 (id=4103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff0200180000cc000100ac1414aac10008"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x400d090) kernel console output (not intermixed with test programs): 6081 - 0 [ 247.369604][ T9115] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.377959][ T9115] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.425026][T14140] loop4: detected capacity change from 0 to 2048 [ 247.479469][T14140] EXT4-fs error (device loop4): ext4_find_extent:903: inode #2: comm syz.4.3349: inode has invalid extent depth: 9 [ 247.511232][T14140] EXT4-fs (loop4): Remounting filesystem read-only [ 247.609774][T14152] 9p: Bad value for 'wfdno' [ 247.691747][T14161] vfat: Unknown parameter 'Æ/Yð“ÒÅ<Æ6*' [ 247.785719][T14161] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3358'. [ 247.794938][T14161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.828525][T14154] 9p: Bad value for 'wfdno' [ 248.013359][T14178] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3364'. [ 248.130853][T14184] EXT4-fs error (device loop5): ext4_find_extent:903: inode #2: comm syz.5.3367: inode has invalid extent depth: 9 [ 248.158906][T14184] EXT4-fs (loop5): Remounting filesystem read-only [ 248.436702][T14207] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3374'. [ 248.462356][T14179] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3363'. [ 248.474693][ T36] IPVS: starting estimator thread 0... [ 248.495422][T14179] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3363: invalid indirect mapped block 256 (level 2) [ 248.517487][T14179] EXT4-fs (loop8): 2 truncates cleaned up [ 248.556848][T14179] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3363: bg 0: block 5: invalid block bitmap [ 248.564994][T14212] IPVS: using max 1728 ests per chain, 86400 per kthread [ 248.629788][T14179] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 248.642228][T14179] EXT4-fs (loop8): This should not happen!! Data will be lost [ 248.642228][T14179] [ 248.651965][T14179] EXT4-fs (loop8): Total free blocks count 0 [ 248.658007][T14179] EXT4-fs (loop8): Free/Dirty block details [ 248.663999][T14179] EXT4-fs (loop8): free_blocks=0 [ 248.669078][T14179] EXT4-fs (loop8): dirty_blocks=67 [ 248.674230][T14179] EXT4-fs (loop8): Block reservation details [ 248.680308][T14179] EXT4-fs (loop8): i_reserved_data_blocks=67 [ 248.729573][T14227] ext4: Unknown parameter 'PL' [ 248.958846][ T3454] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 248.971248][ T3454] EXT4-fs (loop8): This should not happen!! Data will be lost [ 248.971248][ T3454] [ 249.007543][T14249] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.140700][T14249] EXT4-fs (loop4): 1 truncate cleaned up [ 249.148436][ T2474] IPVS: stop unused estimator thread 0... [ 249.230099][T14255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.334879][T14264] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 249.427938][T14276] set_capacity_and_notify: 5 callbacks suppressed [ 249.427969][T14276] loop4: detected capacity change from 0 to 256 [ 249.479933][T14276] FAT-fs (loop4): Directory bread(block 64) failed [ 249.486722][T14276] FAT-fs (loop4): Directory bread(block 65) failed [ 249.494535][T14276] FAT-fs (loop4): Directory bread(block 66) failed [ 249.516868][T14276] FAT-fs (loop4): Directory bread(block 67) failed [ 249.526536][T14276] FAT-fs (loop4): Directory bread(block 68) failed [ 249.533163][T14276] FAT-fs (loop4): Directory bread(block 69) failed [ 249.540082][T14276] FAT-fs (loop4): Directory bread(block 70) failed [ 249.546812][T14276] FAT-fs (loop4): Directory bread(block 71) failed [ 249.553507][T14276] FAT-fs (loop4): Directory bread(block 72) failed [ 249.563044][T14276] FAT-fs (loop4): Directory bread(block 73) failed [ 249.576079][T14279] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3402'. [ 249.589259][T14279] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.658870][T14281] loop5: detected capacity change from 0 to 512 [ 249.668611][T14281] EXT4-fs: Ignoring removed orlov option [ 249.674429][T14281] EXT4-fs: Ignoring removed i_version option [ 249.680562][T14281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.693320][T14281] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 249.701311][T14281] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 249.743536][T14281] EXT4-fs (loop5): orphan cleanup on readonly fs [ 249.764403][T14281] __quota_error: 67 callbacks suppressed [ 249.764477][T14281] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 249.780558][T14281] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 249.795217][T14281] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 249.806218][T14281] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3403: bg 0: block 40: padding at end of block bitmap is not set [ 249.824077][T14290] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 249.837791][T14292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 249.841400][T14281] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 249.844368][T14292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.860741][T14292] vhci_hcd vhci_hcd.0: Device attached [ 249.869303][T14281] EXT4-fs (loop5): 1 truncate cleaned up [ 249.878563][T14292] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 249.883007][T14281] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.3403: bad symlink. [ 249.885172][T14292] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.899093][T14281] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.3403: bad symlink. [ 249.904109][T14292] vhci_hcd vhci_hcd.0: Device attached [ 249.917454][T14281] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.3403: bad symlink. [ 249.930973][T14292] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 249.934755][T14301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3409'. [ 249.937766][T14292] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 249.952130][ T1001] hid-generic 0103:0004:0003.0008: item fetching failed at offset 5/12 [ 249.954585][T14292] vhci_hcd vhci_hcd.0: Device attached [ 249.967716][ T1001] hid-generic 0103:0004:0003.0008: probe with driver hid-generic failed with error -22 [ 249.973228][T14292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 250.014534][T14292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3407'. [ 250.024265][T14292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=14292 comm=syz.4.3407 [ 250.041069][T14292] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14) [ 250.047725][T14292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.055448][T14292] vhci_hcd vhci_hcd.0: Device attached [ 250.078725][T14292] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(16) [ 250.085389][T14292] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 250.093082][T14292] vhci_hcd vhci_hcd.0: Device attached [ 250.107102][ T10] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 250.122283][T14314] loop8: detected capacity change from 0 to 512 [ 250.129299][T14305] vhci_hcd: connection closed [ 250.129476][ T37] vhci_hcd vhci_hcd.4: stop threads [ 250.129623][T14299] vhci_hcd: connection closed [ 250.134258][ T37] vhci_hcd vhci_hcd.4: release socket [ 250.141729][T14295] vhci_hcd: connection closed [ 250.144147][ T37] vhci_hcd vhci_hcd.4: disconnect device [ 250.149714][T14311] vhci_hcd: connection closed [ 250.154332][T14293] vhci_hcd: connection reset by peer [ 250.165588][T14314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.177929][ T37] vhci_hcd vhci_hcd.4: stop threads [ 250.183273][ T37] vhci_hcd vhci_hcd.4: release socket [ 250.188764][ T37] vhci_hcd vhci_hcd.4: disconnect device [ 250.209810][T14314] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 250.212704][ T37] vhci_hcd vhci_hcd.4: stop threads [ 250.217893][T14314] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 250.223097][ T37] vhci_hcd vhci_hcd.4: release socket [ 250.223125][ T37] vhci_hcd vhci_hcd.4: disconnect device [ 250.255042][ T37] vhci_hcd vhci_hcd.4: stop threads [ 250.260439][ T37] vhci_hcd vhci_hcd.4: release socket [ 250.265898][ T37] vhci_hcd vhci_hcd.4: disconnect device [ 250.279636][T14314] EXT4-fs (loop8): orphan cleanup on readonly fs [ 250.280707][ T37] vhci_hcd vhci_hcd.4: stop threads [ 250.286852][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3412'. [ 250.291378][ T37] vhci_hcd vhci_hcd.4: release socket [ 250.301072][T14314] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 250.305699][ T37] vhci_hcd vhci_hcd.4: disconnect device [ 250.318503][T14314] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 250.335335][T14314] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 250.353187][T14314] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3413: bg 0: block 40: padding at end of block bitmap is not set [ 250.376981][T14314] EXT4-fs (loop8): Remounting filesystem read-only [ 250.384623][T14314] EXT4-fs (loop8): 1 truncate cleaned up [ 250.390987][T14328] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3417'. [ 250.405344][T14314] netlink: 'syz.8.3413': attribute type 1 has an invalid length. [ 250.417063][T14314] netlink: 'syz.8.3413': attribute type 3 has an invalid length. [ 250.426500][ T29] audit: type=1400 audit(1769357435.016:37104): avc: denied { create } for pid=14327 comm="syz.0.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 250.457508][ T29] audit: type=1400 audit(1769357435.037:37105): avc: denied { bind } for pid=14327 comm="syz.0.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 250.645176][T14337] loop8: detected capacity change from 0 to 512 [ 250.702066][T14337] EXT4-fs: Ignoring removed nobh option [ 250.707762][T14337] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.714284][T14337] EXT4-fs: Ignoring removed i_version option [ 250.824656][T14347] xt_hashlimit: size too large, truncated to 1048576 [ 251.345351][ T29] audit: type=1400 audit(1769357435.971:37106): avc: denied { remount } for pid=14358 comm="syz.8.3426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 251.381315][T14369] loop5: detected capacity change from 0 to 512 [ 251.411883][T14369] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 251.425161][ T29] audit: type=1400 audit(1769357436.066:37107): avc: denied { unmount } for pid=10111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 251.454269][T14369] EXT4-fs (loop5): 1 truncate cleaned up [ 251.582356][T14375] loop7: detected capacity change from 0 to 1024 [ 251.611362][T14380] loop8: detected capacity change from 0 to 512 [ 251.623467][T14375] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.638943][T14380] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3435: invalid indirect mapped block 256 (level 2) [ 251.658190][T14380] EXT4-fs (loop8): 2 truncates cleaned up [ 251.666962][T14387] loop5: detected capacity change from 0 to 1024 [ 251.677293][T14375] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.693540][T14375] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 251.705981][T14375] EXT4-fs (loop7): This should not happen!! Data will be lost [ 251.705981][T14375] [ 251.720311][T14375] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.735931][T14375] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.750734][T14375] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.768632][T14375] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.788999][T14374] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.804000][T14374] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.827814][T14375] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.870754][T14398] loop5: detected capacity change from 0 to 512 [ 251.886057][T14374] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.914335][T14398] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.3437: corrupted in-inode xattr: e_value size too large [ 251.946232][T14375] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.3432: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.961564][T14398] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3437: couldn't read orphan inode 15 (err -117) [ 251.991550][T14402] delete_channel: no stack [ 252.048631][T14398] netlink: 'syz.5.3437': attribute type 4 has an invalid length. [ 252.067805][T14408] netlink: 'syz.8.3443': attribute type 10 has an invalid length. [ 252.101475][T14398] netlink: 'syz.5.3437': attribute type 4 has an invalid length. [ 252.103619][T14408] bridge0: port 3(batadv0) entered disabled state [ 252.115911][T14408] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.123161][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.149271][T14408] bridge0: port 3(batadv0) entered blocking state [ 252.155846][T14408] bridge0: port 3(batadv0) entered forwarding state [ 252.162642][T14408] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.169820][T14408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.177180][T14408] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.184301][T14408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.196027][T14408] team0: Port device bridge0 added [ 252.279062][ T29] audit: type=1400 audit(1769357436.958:37108): avc: denied { setattr } for pid=14394 comm="syz.5.3437" path="/117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.379360][T12492] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 252.397554][T14426] netlink: 'syz.8.3448': attribute type 10 has an invalid length. [ 252.405496][T14426] __nla_validate_parse: 4 callbacks suppressed [ 252.405516][T14426] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3448'. [ 252.441136][T12492] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 252.466773][T14426] team0: Port device geneve1 added [ 252.548626][T14429] loop8: detected capacity change from 0 to 128 [ 252.580243][T14429] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.632819][ T3454] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.733217][ T29] audit: type=1400 audit(1769357437.431:37109): avc: denied { listen } for pid=14431 comm="syz.8.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.759596][ T3454] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.808685][ T3454] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.860751][ T3454] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.895083][ T29] audit: type=1400 audit(1769357437.609:37110): avc: denied { ioctl } for pid=14447 comm="syz.0.3455" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 252.947861][ T3454] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.970770][T14455] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 252.990698][T14455] EXT4-fs (loop7): 1 truncate cleaned up [ 253.017156][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3456'. [ 253.082232][ T3454] bridge_slave_1: left allmulticast mode [ 253.087966][ T3454] bridge_slave_1: left promiscuous mode [ 253.094012][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.110780][ T3454] bridge_slave_0: left allmulticast mode [ 253.116511][ T3454] bridge_slave_0: left promiscuous mode [ 253.122314][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.195486][ T3454] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 253.254387][ T29] audit: type=1400 audit(1769357437.987:37111): avc: denied { compute_member } for pid=14464 comm="syz.7.3460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 253.279485][ T3454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.290744][ T3454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.301093][ T3454] bond0 (unregistering): Released all slaves [ 253.309483][ T3454] bond1 (unregistering): Released all slaves [ 253.399328][T14475] netlink: 'syz.7.3462': attribute type 7 has an invalid length. [ 253.407564][T14475] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3462'. [ 253.450230][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3462'. [ 253.659447][ T3454] hsr_slave_0: left promiscuous mode [ 253.702367][T14492] FAT-fs (loop7): Directory bread(block 64) failed [ 253.711792][ T3454] hsr_slave_1: left promiscuous mode [ 253.717758][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.725238][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.738097][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.745587][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.757643][T14492] FAT-fs (loop7): Directory bread(block 65) failed [ 253.764261][T14492] FAT-fs (loop7): Directory bread(block 66) failed [ 253.773945][T14492] FAT-fs (loop7): Directory bread(block 67) failed [ 253.780808][ T3454] veth1_macvtap: left promiscuous mode [ 253.786391][ T3454] veth0_macvtap: left promiscuous mode [ 253.790558][T14492] FAT-fs (loop7): Directory bread(block 68) failed [ 253.792103][ T3454] veth1_vlan: left promiscuous mode [ 253.812442][ T3454] veth0_vlan: left promiscuous mode [ 253.818259][T14492] FAT-fs (loop7): Directory bread(block 69) failed [ 253.854056][T14492] FAT-fs (loop7): Directory bread(block 70) failed [ 253.880080][T14492] FAT-fs (loop7): Directory bread(block 71) failed [ 253.945746][T14492] FAT-fs (loop7): Directory bread(block 72) failed [ 253.952392][T14492] FAT-fs (loop7): Directory bread(block 73) failed [ 254.060023][ T3454] team0 (unregistering): Port device team_slave_1 removed [ 254.071867][T14508] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 254.084337][ T3454] team0 (unregistering): Port device team_slave_0 removed [ 254.108284][T14508] bio_check_eod: 2 callbacks suppressed [ 254.108311][T14508] syz.7.3464: attempt to access beyond end of device [ 254.108311][T14508] loop7: rw=8912896, sector=1736, nr_sectors = 32 limit=256 [ 254.129005][T14508] syz.7.3464: attempt to access beyond end of device [ 254.129005][T14508] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 254.151857][T14507] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.184794][T14520] netlink: 'syz.0.3474': attribute type 39 has an invalid length. [ 254.229738][T14438] chnl_net:caif_netlink_parms(): no params data found [ 254.254874][T14526] set_capacity_and_notify: 3 callbacks suppressed [ 254.254960][T14526] loop4: detected capacity change from 0 to 2048 [ 254.308749][T14526] EXT4-fs error (device loop4): ext4_find_extent:903: inode #2: comm syz.4.3475: inode has invalid extent depth: 9 [ 254.328730][T14526] EXT4-fs (loop4): Remounting filesystem read-only [ 254.344864][T14438] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.352006][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.372527][T14438] bridge_slave_0: entered allmulticast mode [ 254.379551][T14438] bridge_slave_0: entered promiscuous mode [ 254.386963][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.394108][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.403464][T14438] bridge_slave_1: entered allmulticast mode [ 254.423103][T14438] bridge_slave_1: entered promiscuous mode [ 254.446813][T14438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.457609][T14438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.478571][T14438] team0: Port device team_slave_0 added [ 254.485355][T14438] team0: Port device team_slave_1 added [ 254.532025][T14438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.539251][T14438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.565340][T14438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.589939][T14438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.597032][T14438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.623192][T14438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.867639][T14438] hsr_slave_0: entered promiscuous mode [ 254.880387][T14438] hsr_slave_1: entered promiscuous mode [ 254.905594][T14438] debugfs: 'hsr0' already exists in 'hsr' [ 254.911457][T14438] Cannot create hsr debugfs directory [ 254.927680][ T10] usb 9-1: enqueue for inactive port 0 [ 254.936975][ T10] usb 9-1: enqueue for inactive port 0 [ 254.952711][T14568] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3482'. [ 255.012576][T14568] loop4: detected capacity change from 0 to 2048 [ 255.021968][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 255.050915][T14570] loop5: detected capacity change from 512 to 3 [ 255.072485][T10167] loop4: p2 < > p3 < p5 > p4 [ 255.077236][T10167] loop4: partition table partially beyond EOD, truncated [ 255.090697][T10167] loop4: p2 start 4278190080 is beyond EOD, truncated [ 255.108780][T10167] loop4: p4 size 8192 extends beyond EOD, truncated [ 255.117569][T10167] loop4: p5 size 8192 extends beyond EOD, truncated [ 255.134718][T14568] loop4: p2 < > p3 < p5 > p4 [ 255.139547][T14568] loop4: partition table partially beyond EOD, truncated [ 255.162864][T14568] loop4: p2 start 4278190080 is beyond EOD, truncated [ 255.186942][T14438] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 255.197325][T14568] loop4: p4 size 8192 extends beyond EOD, truncated [ 255.206695][T14438] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 255.214086][T14583] loop7: detected capacity change from 0 to 512 [ 255.221201][T14568] loop4: p5 size 8192 extends beyond EOD, truncated [ 255.230617][T14438] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 255.251382][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 255.251401][ T29] audit: type=1326 audit(1769357440.077:37115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.291166][T14438] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 255.299859][T14583] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 255.311274][ T29] audit: type=1326 audit(1769357440.119:37116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.334988][ T29] audit: type=1326 audit(1769357440.119:37117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.358647][ T29] audit: type=1326 audit(1769357440.119:37118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.382313][ T29] audit: type=1326 audit(1769357440.119:37119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.406022][ T29] audit: type=1326 audit(1769357440.119:37120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.429697][ T29] audit: type=1326 audit(1769357440.119:37121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.453327][ T29] audit: type=1326 audit(1769357440.119:37122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.477292][ T29] audit: type=1326 audit(1769357440.119:37123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.500873][ T29] audit: type=1326 audit(1769357440.119:37124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2711cfacb9 code=0x7ffc0000 [ 255.534584][T14583] EXT4-fs (loop7): 1 truncate cleaned up [ 255.548667][T14587] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=258 sclass=netlink_audit_socket pid=14587 comm=syz.0.3486 [ 255.595693][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 255.607108][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 255.618393][ T9865] udevd[9865]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 255.636598][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 255.649102][ T9865] udevd[9865]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 255.679345][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 255.751014][T14438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.797523][T14438] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.811860][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.819086][ T9115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.843571][T14438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.854064][T14438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.870686][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.877811][ T9115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.952249][T14438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.148555][T14438] veth0_vlan: entered promiscuous mode [ 256.162068][T14438] veth1_vlan: entered promiscuous mode [ 256.193031][T14438] veth0_macvtap: entered promiscuous mode [ 256.201253][T14438] veth1_macvtap: entered promiscuous mode [ 256.214063][T14438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.225604][T14438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.237111][ T9115] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.246506][ T9115] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.256082][ T9115] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.266699][ T9115] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.370330][T14654] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3453'. [ 256.379419][T14654] netlink: 35 bytes leftover after parsing attributes in process `syz.9.3453'. [ 256.388489][T14654] netlink: 'syz.9.3453': attribute type 5 has an invalid length. [ 256.396310][T14654] netlink: 'syz.9.3453': attribute type 6 has an invalid length. [ 256.404114][T14654] netlink: 35 bytes leftover after parsing attributes in process `syz.9.3453'. [ 256.516377][T14659] loop8: detected capacity change from 0 to 512 [ 256.551786][T14659] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 256.587511][T14659] EXT4-fs error (device loop8): ext4_init_orphan_info:620: comm syz.8.3496: orphan file block 0: bad magic [ 256.608008][T14659] EXT4-fs (loop8): Remounting filesystem read-only [ 256.633606][T14659] EXT4-fs (loop8): mount failed [ 256.675547][T14677] delete_channel: no stack [ 256.692510][T14679] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 256.699080][T14679] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 256.706919][T14679] vhci_hcd vhci_hcd.0: Device attached [ 256.733103][T14682] vhci_hcd: connection closed [ 256.733308][ T3454] vhci_hcd vhci_hcd.9: stop threads [ 256.743421][ T3454] vhci_hcd vhci_hcd.9: release socket [ 256.748964][ T3454] vhci_hcd vhci_hcd.9: disconnect device [ 256.782205][T14688] loop4: detected capacity change from 0 to 512 [ 256.795905][T14688] EXT4-fs (loop4): 1 orphan inode deleted [ 256.805267][T14690] loop8: detected capacity change from 0 to 512 [ 256.812568][T14690] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 256.844499][T14690] EXT4-fs (loop8): 1 truncate cleaned up [ 256.966522][T14700] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.301254][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3515'. [ 257.345173][T14717] loop2: detected capacity change from 0 to 7 [ 257.352565][T14717] netlink: 'syz.4.3516': attribute type 6 has an invalid length. [ 257.470402][T14726] usb usb8: usbfs: process 14726 (syz.9.3520) did not claim interface 0 before use [ 257.512848][T14728] team0: Device gtp0 is of different type [ 257.883588][T14738] openvswitch: netlink: Missing key (keys=40, expected=80) [ 258.044923][T14748] loop8: detected capacity change from 0 to 512 [ 258.230417][T14748] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 258.279673][T14748] EXT4-fs (loop8): 1 truncate cleaned up [ 258.442131][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3535'. [ 258.523756][T14779] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3538'. [ 258.532833][T14779] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3538'. [ 258.566126][T14781] bridge1: entered allmulticast mode [ 258.687852][T14789] loop8: detected capacity change from 0 to 512 [ 258.719994][T14789] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 258.737464][T14789] EXT4-fs (loop8): 1 truncate cleaned up [ 258.946531][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3548'. [ 259.006578][T14812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3550'. [ 259.373217][T14812] netlink: 6902 bytes leftover after parsing attributes in process `syz.0.3550'. [ 259.474382][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3561'. [ 259.749381][T14854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=14854 comm=syz.8.3569 [ 259.783144][T14853] loop8: detected capacity change from 0 to 2048 [ 259.936092][T14859] FAULT_INJECTION: forcing a failure. [ 259.936092][T14859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.949343][T14859] CPU: 0 UID: 0 PID: 14859 Comm: syz.7.3565 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 259.949383][T14859] Tainted: [W]=WARN [ 259.949390][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.949404][T14859] Call Trace: [ 259.949476][T14859] [ 259.949486][T14859] __dump_stack+0x1d/0x30 [ 259.949521][T14859] dump_stack_lvl+0x95/0xd0 [ 259.949557][T14859] dump_stack+0x15/0x1b [ 259.949665][T14859] should_fail_ex+0x263/0x280 [ 259.949688][T14859] should_fail+0xb/0x20 [ 259.949781][T14859] should_fail_usercopy+0x1a/0x20 [ 259.949810][T14859] strncpy_from_user+0x27/0x250 [ 259.949895][T14859] __se_sys_memfd_create+0x205/0x6c0 [ 259.949969][T14859] __x64_sys_memfd_create+0x31/0x40 [ 259.950035][T14859] x64_sys_call+0x28cb/0x3000 [ 259.950064][T14859] do_syscall_64+0xc0/0x2a0 [ 259.950175][T14859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.950207][T14859] RIP: 0033:0x7f8598eaacb9 [ 259.950226][T14859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.950246][T14859] RSP: 002b:00007f85978e5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 259.950274][T14859] RAX: ffffffffffffffda RBX: 0000000000000522 RCX: 00007f8598eaacb9 [ 259.950290][T14859] RDX: 00007f85978e5ee0 RSI: 0000000000000000 RDI: 00007f8598f1730b [ 259.950317][T14859] RBP: 00002000000007c0 R08: 00000000ffffffff R09: 0000000000000000 [ 259.950336][T14859] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 259.950355][T14859] R13: 00007f85978e5ee0 R14: 00007f85978e5ea0 R15: 0000200000000380 [ 259.950382][T14859] [ 260.176929][T14867] FAULT_INJECTION: forcing a failure. [ 260.176929][T14867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.190165][T14867] CPU: 0 UID: 0 PID: 14867 Comm: syz.8.3573 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 260.190201][T14867] Tainted: [W]=WARN [ 260.190280][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.190372][T14867] Call Trace: [ 260.190381][T14867] [ 260.190431][T14867] __dump_stack+0x1d/0x30 [ 260.190535][T14867] dump_stack_lvl+0x95/0xd0 [ 260.190566][T14867] dump_stack+0x15/0x1b [ 260.190590][T14867] should_fail_ex+0x263/0x280 [ 260.190612][T14867] should_fail+0xb/0x20 [ 260.190633][T14867] should_fail_usercopy+0x1a/0x20 [ 260.190704][T14867] _copy_to_user+0x20/0xa0 [ 260.190740][T14867] simple_read_from_buffer+0xb5/0x130 [ 260.190853][T14867] proc_fail_nth_read+0x10e/0x150 [ 260.190942][T14867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.190981][T14867] vfs_read+0x1ab/0x7f0 [ 260.191039][T14867] ? __rcu_read_unlock+0x4e/0x70 [ 260.191067][T14867] ? __fget_files+0x184/0x1c0 [ 260.191171][T14867] ? mutex_lock+0x57/0x90 [ 260.191212][T14867] ksys_read+0xdc/0x1a0 [ 260.191258][T14867] __x64_sys_read+0x40/0x50 [ 260.191299][T14867] x64_sys_call+0x2889/0x3000 [ 260.191341][T14867] do_syscall_64+0xc0/0x2a0 [ 260.191460][T14867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.191491][T14867] RIP: 0033:0x7f5c7fb6b58e [ 260.191511][T14867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.191530][T14867] RSP: 002b:00007f5c7e606fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.191551][T14867] RAX: ffffffffffffffda RBX: 00007f5c7e6076c0 RCX: 00007f5c7fb6b58e [ 260.191569][T14867] RDX: 000000000000000f RSI: 00007f5c7e6070a0 RDI: 0000000000000004 [ 260.191584][T14867] RBP: 00007f5c7e607090 R08: 0000000000000000 R09: 0000000000000000 [ 260.191602][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.191637][T14867] R13: 00007f5c7fe26038 R14: 00007f5c7fe25fa0 R15: 00007ffcd5da0418 [ 260.191664][T14867] [ 260.510079][T14870] loop4: detected capacity change from 0 to 8192 [ 260.705633][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 260.705654][ T29] audit: type=1400 audit(1769357445.809:37300): avc: denied { setopt } for pid=14876 comm="syz.4.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.741749][ T29] audit: type=1400 audit(1769357445.841:37301): avc: denied { shutdown } for pid=14876 comm="syz.4.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.762172][ T29] audit: type=1400 audit(1769357445.841:37302): avc: denied { read } for pid=14876 comm="syz.4.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.953211][T14891] delete_channel: no stack [ 261.786387][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3590'. [ 262.146194][ T29] audit: type=1400 audit(1769357447.321:37303): avc: denied { create } for pid=14918 comm="syz.9.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 262.169756][T14923] loop9: detected capacity change from 0 to 512 [ 262.176528][T14923] EXT4-fs: Ignoring removed bh option [ 262.182004][T14923] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.189097][T14923] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 262.203588][T14923] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 262.211847][T14923] EXT4-fs (loop9): orphan cleanup on readonly fs [ 262.218657][T14923] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 4 [ 262.228398][T14923] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 262.238230][T14923] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3594: Failed to acquire dquot type 1 [ 262.250244][T14923] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3594: Invalid block bitmap block 0 in block_group 0 [ 262.264160][T14923] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3594: Invalid block bitmap block 0 in block_group 0 [ 262.279007][T14923] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3594: Invalid block bitmap block 0 in block_group 0 [ 262.292872][T14923] Quota error (device loop9): write_blk: dquota write failed [ 262.300379][T14923] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 262.310321][T14923] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3594: Failed to acquire dquot type 1 [ 262.323487][T14923] Quota error (device loop9): write_blk: dquota write failed [ 262.330959][T14923] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 262.340936][T14923] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3594: Failed to acquire dquot type 1 [ 262.353315][T14923] EXT4-fs (loop9): 1 orphan inode deleted [ 262.359844][T14923] EXT4-fs mount: 50 callbacks suppressed [ 262.359865][T14923] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.460507][ T4308] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.703551][T14438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.882955][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3602'. [ 263.016286][T14957] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3604'. [ 263.133521][T14963] loop9: detected capacity change from 0 to 512 [ 263.159613][T14963] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 263.194096][T14963] EXT4-fs (loop9): orphan cleanup on readonly fs [ 263.234954][T14963] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 263.249875][T14963] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 263.256573][T14963] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3609: bad orphan inode 768 [ 263.271118][T14968] loop7: detected capacity change from 0 to 128 [ 263.302618][T14968] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.338927][ T9115] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.398798][T14963] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.453630][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3614'. [ 263.776108][T14992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3620'. [ 263.800516][T14992] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 263.840556][T14992] batman_adv: batadv0: Adding interface: ip6gretap2 [ 263.847276][T14992] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.945248][T14992] batman_adv: batadv0: Interface activated: ip6gretap2 [ 263.983107][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3620'. [ 264.256454][T15009] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 264.301054][T15009] SELinux: failed to load policy [ 264.383715][T15014] loop7: detected capacity change from 0 to 512 [ 264.444976][T15014] EXT4-fs (loop7): too many log groups per flexible block group [ 264.483656][T15014] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 264.520368][T15014] EXT4-fs (loop7): mount failed [ 264.614140][T14438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.995222][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3631'. [ 265.006449][T15034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.039417][T15036] loop9: detected capacity change from 0 to 2048 [ 265.065585][T15036] EXT4-fs: Ignoring removed nobh option [ 265.085543][T15030] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 265.092205][T15030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 265.100044][T15030] vhci_hcd vhci_hcd.0: Device attached [ 265.106195][T15034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.137850][T15036] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #2: comm syz.9.3635: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 265.189459][T15036] EXT4-fs (loop9): Remounting filesystem read-only [ 265.215179][T15034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.222497][T15036] EXT4-fs (loop9): get root inode failed [ 265.231404][T15036] EXT4-fs (loop9): mount failed [ 265.247593][T15038] vhci_hcd: connection closed [ 265.247961][ T9115] vhci_hcd vhci_hcd.7: stop threads [ 265.258161][ T9115] vhci_hcd vhci_hcd.7: release socket [ 265.263591][ T9115] vhci_hcd vhci_hcd.7: disconnect device [ 265.274218][T15034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.323885][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3635'. [ 265.351267][ T9115] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.395326][ T3456] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.407780][ T9115] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.460614][ T9115] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.524436][T15051] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 265.686198][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3642'. [ 265.695218][T15061] netem: unknown loss type 0 [ 265.699992][T15061] netem: change failed [ 265.706443][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3642'. [ 265.730262][T15061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.863905][T15078] loop4: detected capacity change from 0 to 764 [ 265.895942][T15078] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 265.928140][T15078] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.3647'. [ 266.042012][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 266.178002][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 266.178023][ T29] audit: type=1326 audit(1769357451.552:37386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.207835][ T29] audit: type=1326 audit(1769357451.552:37387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.231457][ T29] audit: type=1326 audit(1769357451.552:37388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.255076][ T29] audit: type=1326 audit(1769357451.552:37389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.278755][ T29] audit: type=1326 audit(1769357451.552:37390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.302579][ T29] audit: type=1326 audit(1769357451.552:37391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.326129][ T29] audit: type=1326 audit(1769357451.552:37392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.349769][ T29] audit: type=1326 audit(1769357451.552:37393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.393099][ T29] audit: type=1400 audit(1769357451.552:37394): avc: denied { map } for pid=15084 comm="syz.4.3650" path="socket:[59401]" dev="sockfs" ino=59401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 266.416464][ T29] audit: type=1326 audit(1769357451.552:37395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.4.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855edcacb9 code=0x7ffc0000 [ 266.634941][T15109] loop8: detected capacity change from 0 to 512 [ 266.715360][T15109] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 266.734079][T15109] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 266.744917][T15109] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3652: Corrupt directory, running e2fsck is recommended [ 267.180580][T15156] loop9: detected capacity change from 0 to 128 [ 267.229883][T15156] loop2: detected capacity change from 0 to 7 [ 267.560627][T15109] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 267.609043][T15109] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.3652: corrupted in-inode xattr: invalid ea_ino [ 267.665802][T15109] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3652: couldn't read orphan inode 15 (err -117) [ 267.720467][T15109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.819669][T10111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.975624][T15185] xt_hashlimit: max too large, truncated to 1048576 [ 268.022800][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 268.028953][ T4308] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 268.035212][T15083] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 268.063945][T15190] __nla_validate_parse: 3 callbacks suppressed [ 268.063964][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3668'. [ 268.179612][T15200] loop8: detected capacity change from 0 to 256 [ 268.295895][T15206] loop7: detected capacity change from 0 to 128 [ 268.902623][T15232] FAULT_INJECTION: forcing a failure. [ 268.902623][T15232] name failslab, interval 1, probability 0, space 0, times 0 [ 268.915413][T15232] CPU: 0 UID: 0 PID: 15232 Comm: syz.4.3682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 268.915514][T15232] Tainted: [W]=WARN [ 268.915525][T15232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.915542][T15232] Call Trace: [ 268.915551][T15232] [ 268.915559][T15232] __dump_stack+0x1d/0x30 [ 268.915585][T15232] dump_stack_lvl+0x95/0xd0 [ 268.915695][T15232] dump_stack+0x15/0x1b [ 268.915723][T15232] should_fail_ex+0x263/0x280 [ 268.915790][T15232] should_failslab+0x8c/0xb0 [ 268.915815][T15232] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 268.915846][T15232] ? alloc_vmap_area+0x243/0xe50 [ 268.915889][T15232] alloc_vmap_area+0x243/0xe50 [ 268.915910][T15232] ? should_fail_ex+0xd9/0x280 [ 268.915936][T15232] ? __kmalloc_cache_node_noprof+0x2a2/0x4a0 [ 268.915966][T15232] __get_vm_area_node+0x173/0x1d0 [ 268.916030][T15232] __vmalloc_node_range_noprof+0x291/0x12b0 [ 268.916065][T15232] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 268.916115][T15232] ? __rcu_read_unlock+0x4e/0x70 [ 268.916141][T15232] ? avc_has_perm_noaudit+0xab/0x130 [ 268.916237][T15232] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 268.916279][T15232] __vmalloc_noprof+0xa4/0xf0 [ 268.916301][T15232] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 268.916362][T15232] bpf_prog_alloc_no_stats+0x47/0x380 [ 268.916445][T15232] ? bpf_prog_alloc+0x2a/0x150 [ 268.916487][T15232] bpf_prog_alloc+0x3c/0x150 [ 268.916531][T15232] bpf_prog_load+0x506/0x1140 [ 268.916571][T15232] ? security_bpf+0x2b/0x90 [ 268.916645][T15232] __sys_bpf+0x469/0x7b0 [ 268.916673][T15232] __x64_sys_bpf+0x41/0x50 [ 268.916718][T15232] x64_sys_call+0x28e1/0x3000 [ 268.916748][T15232] do_syscall_64+0xc0/0x2a0 [ 268.916778][T15232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.916801][T15232] RIP: 0033:0x7f855edcacb9 [ 268.916833][T15232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.916874][T15232] RSP: 002b:00007f855d827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.916955][T15232] RAX: ffffffffffffffda RBX: 00007f855f045fa0 RCX: 00007f855edcacb9 [ 268.916970][T15232] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 268.916988][T15232] RBP: 00007f855d827090 R08: 0000000000000000 R09: 0000000000000000 [ 268.917034][T15232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.917097][T15232] R13: 00007f855f046038 R14: 00007f855f045fa0 R15: 00007ffff98dbb38 [ 268.917130][T15232] [ 268.917144][T15232] syz.4.3682: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 269.181414][T15232] CPU: 0 UID: 0 PID: 15232 Comm: syz.4.3682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 269.181450][T15232] Tainted: [W]=WARN [ 269.181457][T15232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.181471][T15232] Call Trace: [ 269.181478][T15232] [ 269.181489][T15232] __dump_stack+0x1d/0x30 [ 269.181612][T15232] dump_stack_lvl+0x95/0xd0 [ 269.181639][T15232] dump_stack+0x15/0x1b [ 269.181664][T15232] warn_alloc+0x145/0x1c0 [ 269.181703][T15232] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 269.181755][T15232] ? __rcu_read_unlock+0x4e/0x70 [ 269.181778][T15232] ? avc_has_perm_noaudit+0xab/0x130 [ 269.181826][T15232] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 269.181923][T15232] __vmalloc_noprof+0xa4/0xf0 [ 269.181955][T15232] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 269.181996][T15232] bpf_prog_alloc_no_stats+0x47/0x380 [ 269.182066][T15232] ? bpf_prog_alloc+0x2a/0x150 [ 269.182105][T15232] bpf_prog_alloc+0x3c/0x150 [ 269.182145][T15232] bpf_prog_load+0x506/0x1140 [ 269.182184][T15232] ? security_bpf+0x2b/0x90 [ 269.182288][T15232] __sys_bpf+0x469/0x7b0 [ 269.182365][T15232] __x64_sys_bpf+0x41/0x50 [ 269.182459][T15232] x64_sys_call+0x28e1/0x3000 [ 269.182494][T15232] do_syscall_64+0xc0/0x2a0 [ 269.182539][T15232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.182645][T15232] RIP: 0033:0x7f855edcacb9 [ 269.182664][T15232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.182691][T15232] RSP: 002b:00007f855d827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.182746][T15232] RAX: ffffffffffffffda RBX: 00007f855f045fa0 RCX: 00007f855edcacb9 [ 269.182767][T15232] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 269.182786][T15232] RBP: 00007f855d827090 R08: 0000000000000000 R09: 0000000000000000 [ 269.182801][T15232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.182818][T15232] R13: 00007f855f046038 R14: 00007f855f045fa0 R15: 00007ffff98dbb38 [ 269.182847][T15232] [ 269.182869][T15232] Mem-Info: [ 269.391353][T15232] active_anon:56432 inactive_anon:7 isolated_anon:0 [ 269.391353][T15232] active_file:26728 inactive_file:2755 isolated_file:0 [ 269.391353][T15232] unevictable:42 dirty:222 writeback:0 [ 269.391353][T15232] slab_reclaimable:2761 slab_unreclaimable:20583 [ 269.391353][T15232] mapped:35732 shmem:45879 pagetables:2028 [ 269.391353][T15232] sec_pagetables:0 bounce:0 [ 269.391353][T15232] kernel_misc_reclaimable:0 [ 269.391353][T15232] free:1806644 free_pcp:14642 free_cma:0 [ 269.442144][T15232] Node 0 active_anon:225728kB inactive_anon:28kB active_file:106912kB inactive_file:11020kB unevictable:168kB isolated(anon):0kB isolated(file):0kB mapped:142928kB dirty:888kB writeback:0kB shmem:183516kB kernel_stack:4496kB pagetables:8112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.470043][T15232] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.499770][T15232] lowmem_reserve[]: 0 2879 7858 7858 [ 269.505118][T15232] Node 0 DMA32 free:2945488kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949016kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 269.536525][T15232] lowmem_reserve[]: 0 0 4978 4978 [ 269.541693][T15232] Node 0 Normal free:4265728kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:225728kB inactive_anon:28kB active_file:106912kB inactive_file:11020kB unevictable:168kB writepending:888kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:54804kB local_pcp:27908kB free_cma:0kB [ 269.575282][T15232] lowmem_reserve[]: 0 0 0 0 [ 269.579870][T15232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 269.592714][T15232] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945488kB [ 269.609042][T15232] Node 0 Normal: 2638*4kB (UME) 1711*8kB (UME) 702*16kB (UME) 753*32kB (UME) 803*64kB (UME) 439*128kB (UME) 339*256kB (UME) 277*512kB (UME) 207*1024kB (UME) 116*2048kB (UME) 835*4096kB (UM) = 4265456kB [ 269.629271][T15232] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 269.638650][T15232] 75433 total pagecache pages [ 269.643391][T15232] 7 pages in swap cache [ 269.647566][T15232] Free swap = 124968kB [ 269.651770][T15232] Total swap = 124996kB [ 269.655977][T15232] 2097051 pages RAM [ 269.659804][T15232] 0 pages HighMem/MovableOnly [ 269.664651][T15232] 81397 pages reserved [ 270.110974][T15273] loop7: detected capacity change from 0 to 512 [ 270.156311][T15273] kernel read not supported for file /x (pid: 15273 comm: syz.7.3697) [ 270.249662][T15279] loop7: detected capacity change from 0 to 128 [ 270.280818][T15279] EXT4-fs: Ignoring removed i_version option [ 270.311170][T15279] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 270.329468][T15279] EXT4-fs: error: could not find journal device path [ 270.370974][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3703'. [ 270.530483][T15300] tipc: Started in network mode [ 270.535499][T15300] tipc: Node identity ac14140f, cluster identity 4711 [ 270.599393][T15300] tipc: New replicast peer: 255.255.255.255 [ 270.605638][T15300] tipc: Enabled bearer , priority 16 [ 270.921212][T15305] loop8: detected capacity change from 0 to 1024 [ 270.948162][T15305] EXT4-fs: Ignoring removed oldalloc option [ 270.975789][T15305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.035431][T15305] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.096052][T15305] netlink: 'syz.8.3710': attribute type 2 has an invalid length. [ 271.162462][T10111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.396665][T15316] FAULT_INJECTION: forcing a failure. [ 271.396665][T15316] name failslab, interval 1, probability 0, space 0, times 0 [ 271.409479][T15316] CPU: 1 UID: 0 PID: 15316 Comm: syz.7.3714 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.409521][T15316] Tainted: [W]=WARN [ 271.409529][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.409543][T15316] Call Trace: [ 271.409552][T15316] [ 271.409563][T15316] __dump_stack+0x1d/0x30 [ 271.409590][T15316] dump_stack_lvl+0x95/0xd0 [ 271.409613][T15316] dump_stack+0x15/0x1b [ 271.409652][T15316] should_fail_ex+0x263/0x280 [ 271.409745][T15316] should_failslab+0x8c/0xb0 [ 271.409798][T15316] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 271.409821][T15316] ? __alloc_skb+0x2f0/0x4b0 [ 271.409922][T15316] __alloc_skb+0x2f0/0x4b0 [ 271.409955][T15316] ? __alloc_skb+0x219/0x4b0 [ 271.409982][T15316] netlink_alloc_large_skb+0xbf/0xf0 [ 271.410008][T15316] netlink_sendmsg+0x40c/0x6f0 [ 271.410123][T15316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.410151][T15316] __sock_sendmsg+0x145/0x170 [ 271.410183][T15316] ____sys_sendmsg+0x31e/0x4a0 [ 271.410306][T15316] ___sys_sendmsg+0x195/0x1e0 [ 271.410353][T15316] __x64_sys_sendmsg+0xd4/0x160 [ 271.410392][T15316] x64_sys_call+0x17ba/0x3000 [ 271.410419][T15316] do_syscall_64+0xc0/0x2a0 [ 271.410459][T15316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.410490][T15316] RIP: 0033:0x7f8598eaacb9 [ 271.410529][T15316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.410637][T15316] RSP: 002b:00007f8597907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.410659][T15316] RAX: ffffffffffffffda RBX: 00007f8599125fa0 RCX: 00007f8598eaacb9 [ 271.410674][T15316] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 271.410687][T15316] RBP: 00007f8597907090 R08: 0000000000000000 R09: 0000000000000000 [ 271.410701][T15316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.410718][T15316] R13: 00007f8599126038 R14: 00007f8599125fa0 R15: 00007ffe32fc8bb8 [ 271.410745][T15316] [ 271.746496][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3715'. [ 271.790543][ T1001] tipc: Node number set to 2886997007 [ 271.940737][T15329] loop7: detected capacity change from 0 to 512 [ 271.973310][T15329] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 272.023480][T15329] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.071671][T15329] sg_write: process 893 (syz.7.3721) changed security contexts after opening file descriptor, this is not allowed. [ 272.156841][T15336] loop4: detected capacity change from 0 to 512 [ 272.163821][T15336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 272.183689][T15336] EXT4-fs (loop4): 1 truncate cleaned up [ 272.200711][T15336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.236510][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 272.292243][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3723'. [ 272.379019][T15330] loop8: detected capacity change from 0 to 32768 [ 272.423467][T10167] loop8: p1 p3 < > p4 [ 272.428712][T10167] loop8: p4 size 720896 extends beyond EOD, truncated [ 272.440325][T15330] loop8: p1 p3 < > p4 [ 272.446222][T15330] loop8: p4 size 720896 extends beyond EOD, truncated [ 272.727657][T15358] loop9: detected capacity change from 0 to 1024 [ 272.762212][T15358] EXT4-fs: Ignoring removed nobh option [ 272.786348][T15358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 272.795218][T15358] EXT4-fs (loop9): blocks per group (262144) and clusters per group (8192) inconsistent [ 272.996827][T11088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.390590][ T9865] udevd[9865]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 273.401763][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 273.413079][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 273.430416][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 273.443428][ T9865] udevd[9865]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 273.454835][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 273.540332][T15373] loop9: detected capacity change from 0 to 1024 [ 273.569798][T15379] loop8: detected capacity change from 0 to 128 [ 273.598623][T15379] FAT-fs (loop8): bogus number of directory entries (390) [ 273.605878][T15379] FAT-fs (loop8): Can't find a valid FAT filesystem [ 273.704083][T15373] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.821163][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3735'. [ 273.882425][T15390] loop4: detected capacity change from 0 to 512 [ 273.966060][T15390] EXT4-fs error (device loop4): __ext4_iget:5426: inode #2: block 3: comm syz.4.3742: invalid block [ 273.990381][T15373] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 274.009683][T15390] EXT4-fs (loop4): get root inode failed [ 274.016194][T15390] EXT4-fs (loop4): mount failed [ 274.170459][T14438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.331100][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3753'. [ 274.340893][T15419] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 274.359410][ T3456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.375931][T15419] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 274.387402][T15419] EXT4-fs (loop7): orphan cleanup on readonly fs [ 274.395575][T15419] __quota_error: 18 callbacks suppressed [ 274.395593][T15419] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 274.411773][T15419] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 274.421907][T15419] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.3751: Failed to acquire dquot type 0 [ 274.452096][T15419] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 274.471799][T15419] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 274.482658][T15419] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.3751: Failed to acquire dquot type 0 [ 274.515001][ T3456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.541518][T15419] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.3751: Freeing blocks not in datazone - block = 0, count = 4096 [ 274.567182][T15419] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 274.580054][T15419] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 274.584151][ T3456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.591091][T15419] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.3751: Failed to acquire dquot type 0 [ 274.670175][T15419] EXT4-fs (loop7): 1 orphan inode deleted [ 274.684263][T15419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.702651][ T3456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.715106][T15437] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.775652][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.827196][ T29] audit: type=1400 audit(1769357460.634:37414): avc: denied { associate } for pid=15436 comm="syz.8.3759" name="/" dev="ramfs" ino=60093 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 274.877267][ T3456] bridge_slave_1: left allmulticast mode [ 274.883090][ T3456] bridge_slave_1: left promiscuous mode [ 274.888812][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.899354][ T29] audit: type=1400 audit(1769357460.634:37415): avc: denied { map_create } for pid=15445 comm="syz.7.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.919310][ T29] audit: type=1400 audit(1769357460.634:37416): avc: denied { map_read map_write } for pid=15445 comm="syz.7.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.939669][ T29] audit: type=1400 audit(1769357460.634:37417): avc: denied { prog_load } for pid=15445 comm="syz.7.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.960249][T10111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.976268][ T3456] bridge_slave_0: left allmulticast mode [ 274.981947][ T3456] bridge_slave_0: left promiscuous mode [ 274.987783][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.115028][T15469] set_capacity_and_notify: 2 callbacks suppressed [ 275.115051][T15469] loop7: detected capacity change from 0 to 1024 [ 275.136181][T15469] ext2: Unknown parameter 'nouser_xattr' [ 275.162055][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3770'. [ 275.172429][T15474] loop8: detected capacity change from 0 to 1024 [ 275.198795][T15474] EXT4-fs: Ignoring removed orlov option [ 275.227170][T15474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.263436][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3773'. [ 275.278797][T15474] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.300993][T15480] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 275.309156][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.315690][T15474] EXT4-fs (loop8): shut down requested (0) [ 275.329659][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.350369][T15489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3772'. [ 275.377215][T10111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.388660][ T3456] bond0 (unregistering): Released all slaves [ 275.399065][ T3456] bond1 (unregistering): Released all slaves [ 275.450274][T15480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.467160][T15400] chnl_net:caif_netlink_parms(): no params data found [ 275.626361][ T3456] hsr_slave_0: left promiscuous mode [ 275.645444][ T3456] hsr_slave_1: left promiscuous mode [ 275.651238][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.658703][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.673792][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.681266][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.724285][ T3456] veth1_macvtap: left promiscuous mode [ 275.730891][T15522] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3783' sets config #236 [ 275.735355][ T3456] veth0_macvtap: left promiscuous mode [ 275.746363][ T3456] veth1_vlan: left promiscuous mode [ 275.752513][ T3456] veth0_vlan: left promiscuous mode [ 275.784163][T15522] loop7: detected capacity change from 0 to 512 [ 275.862897][T15522] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.874724][T15522] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 275.878768][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3786'. [ 275.884865][T15522] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3783: Corrupt directory, running e2fsck is recommended [ 275.928135][T15522] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 275.966320][T15522] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3783: corrupted in-inode xattr: e_name out of bounds [ 275.998104][T15522] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3783: couldn't read orphan inode 15 (err -117) [ 276.025920][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 276.034895][T15522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.064839][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 276.084019][T15522] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 276.095603][T15522] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 276.105745][T15522] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3783: Corrupt directory, running e2fsck is recommended [ 276.145621][T15522] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.3783: path /365/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 276.184068][T15522] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 8: comm syz.7.3783: path /365/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 276.226768][ T9] infiniband syz2: ib_query_port failed (-19) [ 276.238709][T15535] bond1: option arp_interval: invalid value (18446744073709551615) [ 276.246726][T15535] bond1: option arp_interval: allowed values 0 - 2147483647 [ 276.269313][T15535] bond1 (unregistering): Released all slaves [ 276.275776][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.316768][T15400] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.324010][T15400] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.360938][T15400] bridge_slave_0: entered allmulticast mode [ 276.372087][T15400] bridge_slave_0: entered promiscuous mode [ 276.408288][T15400] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.415456][T15400] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.431566][T15400] bridge_slave_1: entered allmulticast mode [ 276.445755][T15400] bridge_slave_1: entered promiscuous mode [ 276.488760][T15400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.518850][T15400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.576367][T15400] team0: Port device team_slave_0 added [ 276.588613][T15400] team0: Port device team_slave_1 added [ 276.630567][T15400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.637794][T15400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.663951][T15400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.686394][T15400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.693498][T15400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.719500][T15400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.824075][T15588] loop9: detected capacity change from 0 to 1024 [ 276.859579][T15588] EXT4-fs: Ignoring removed orlov option [ 276.873876][T15400] hsr_slave_0: entered promiscuous mode [ 276.882981][T15400] hsr_slave_1: entered promiscuous mode [ 276.895742][T15400] debugfs: 'hsr0' already exists in 'hsr' [ 276.901599][T15400] Cannot create hsr debugfs directory [ 276.914499][T15588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.329341][T15400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.345701][T15400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.354515][T15612] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.368723][T15400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.385352][T15400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.419566][T15623] loop7: detected capacity change from 0 to 8192 [ 277.449303][T15623] FAT-fs (loop7): bogus logical sector size 0 [ 277.455473][T15623] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 277.464916][T15623] FAT-fs (loop7): Can't find a valid FAT filesystem [ 277.472781][T15400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.498456][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3801'. [ 277.508081][T15400] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.533109][ T9115] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.577566][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.584831][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.618769][ T9115] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.689364][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.696529][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.731159][ T9115] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.824847][ T9115] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.999482][ T9115] bridge_slave_1: left allmulticast mode [ 278.005270][ T9115] bridge_slave_1: left promiscuous mode [ 278.010960][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.059217][ T9115] bridge_slave_0: left allmulticast mode [ 278.065094][ T9115] bridge_slave_0: left promiscuous mode [ 278.070868][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.256909][ T9115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.284868][ T9115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.304871][ T9115] bond0 (unregistering): Released all slaves [ 278.320818][ T9115] bond1 (unregistering): Released all slaves [ 278.377975][T15400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.506390][ T9115] hsr_slave_0: left promiscuous mode [ 278.524374][ T9115] hsr_slave_1: left promiscuous mode [ 278.534052][ T9115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.541625][ T9115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.566971][ T9115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.574419][ T9115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.592630][ T9115] veth1_macvtap: left promiscuous mode [ 278.598692][ T9115] veth0_macvtap: left promiscuous mode [ 278.604279][ T9115] veth1_vlan: left promiscuous mode [ 278.612693][ T9115] veth0_vlan: left promiscuous mode [ 278.751124][T15743] FAULT_INJECTION: forcing a failure. [ 278.751124][T15743] name failslab, interval 1, probability 0, space 0, times 0 [ 278.763906][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz.7.3814 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.763941][T15743] Tainted: [W]=WARN [ 278.763948][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.763964][T15743] Call Trace: [ 278.763973][T15743] [ 278.764026][T15743] __dump_stack+0x1d/0x30 [ 278.764053][T15743] dump_stack_lvl+0x95/0xd0 [ 278.764238][T15743] dump_stack+0x15/0x1b [ 278.764259][T15743] should_fail_ex+0x263/0x280 [ 278.764295][T15743] should_failslab+0x8c/0xb0 [ 278.764324][T15743] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 278.764371][T15743] ? sidtab_sid2str_get+0xa0/0x130 [ 278.764431][T15743] kmemdup_noprof+0x2b/0x70 [ 278.764476][T15743] sidtab_sid2str_get+0xa0/0x130 [ 278.764550][T15743] security_sid_to_context_core+0x1eb/0x2e0 [ 278.764669][T15743] security_sid_to_context+0x27/0x40 [ 278.764749][T15743] selinux_lsmprop_to_secctx+0x67/0xf0 [ 278.764835][T15743] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 278.764866][T15743] audit_log_subj_ctx+0xa4/0x3e0 [ 278.764895][T15743] ? skb_put+0xa9/0xf0 [ 278.764923][T15743] audit_log_task_context+0x48/0x70 [ 278.764949][T15743] audit_log_task+0xf3/0x250 [ 278.764986][T15743] audit_seccomp+0x60/0x100 [ 278.765048][T15743] ? __seccomp_filter+0x8db/0x1350 [ 278.765085][T15743] __seccomp_filter+0x8ec/0x1350 [ 278.765185][T15743] ? __schedule+0x82d/0xc90 [ 278.765226][T15743] __secure_computing+0x81/0x150 [ 278.765316][T15743] syscall_trace_enter+0xce/0x1e0 [ 278.765348][T15743] do_syscall_64+0x9a/0x2a0 [ 278.765383][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.765408][T15743] RIP: 0033:0x7f8598e6b58e [ 278.765427][T15743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.765453][T15743] RSP: 002b:00007f8597906fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.765489][T15743] RAX: ffffffffffffffda RBX: 00007f85979076c0 RCX: 00007f8598e6b58e [ 278.765506][T15743] RDX: 000000000000000f RSI: 00007f85979070a0 RDI: 0000000000000003 [ 278.765519][T15743] RBP: 00007f8597907090 R08: 0000000000000000 R09: 0000000000000000 [ 278.765617][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.765634][T15743] R13: 00007f8599126038 R14: 00007f8599125fa0 R15: 00007ffe32fc8bb8 [ 278.765679][T15743] [ 278.998481][ T9115] team0 (unregistering): Port device team_slave_1 removed [ 279.027463][ T9115] team0 (unregistering): Port device team_slave_0 removed [ 279.111831][T15400] veth0_vlan: entered promiscuous mode [ 279.156618][T15400] veth1_vlan: entered promiscuous mode [ 279.205454][T15400] veth0_macvtap: entered promiscuous mode [ 279.216283][T15765] 9p: Bad value for 'rfdno' [ 279.233024][T15400] veth1_macvtap: entered promiscuous mode [ 279.269680][T15400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.333042][T15400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.397416][ T9115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.425609][ T9115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.460215][T15643] chnl_net:caif_netlink_parms(): no params data found [ 279.485064][ T9115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.497353][T15773] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3821'. [ 279.532875][ T9115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.573865][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3822'. [ 279.597293][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 279.597373][ T29] audit: type=1400 audit(1769357465.642:37438): avc: denied { mounton } for pid=15805 comm="syz.2.3825" path="/proc/4/cgroup" dev="proc" ino=60820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 279.665502][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.672768][T15643] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.683912][T15643] bridge_slave_0: entered allmulticast mode [ 279.693060][T15643] bridge_slave_0: entered promiscuous mode [ 279.712592][T15643] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.719732][T15643] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.728055][T15643] bridge_slave_1: entered allmulticast mode [ 279.735167][T15643] bridge_slave_1: entered promiscuous mode [ 279.769804][ T29] audit: type=1400 audit(1769357465.831:37439): avc: denied { listen } for pid=15812 comm="syz.7.3827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 279.793195][T15813] netlink: 'syz.7.3827': attribute type 13 has an invalid length. [ 279.815078][T15643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.919019][T15820] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.937110][T15643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.946346][ T12] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.956115][ T12] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.968669][T15820] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.015507][T15840] FAULT_INJECTION: forcing a failure. [ 280.015507][T15840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.023884][ T12] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.028844][T15840] CPU: 0 UID: 0 PID: 15840 Comm: syz.7.3833 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.028948][T15840] Tainted: [W]=WARN [ 280.028980][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.029052][T15840] Call Trace: [ 280.029067][T15840] [ 280.029090][T15840] __dump_stack+0x1d/0x30 [ 280.029173][T15840] dump_stack_lvl+0x95/0xd0 [ 280.029317][T15840] dump_stack+0x15/0x1b [ 280.029392][T15840] should_fail_ex+0x263/0x280 [ 280.029475][T15840] should_fail+0xb/0x20 [ 280.029530][T15840] should_fail_usercopy+0x1a/0x20 [ 280.029621][T15840] _copy_from_iter+0xcf/0xea0 [ 280.029749][T15840] ? alloc_pages_mpol+0x217/0x260 [ 280.029854][T15840] copy_page_from_iter+0x178/0x2a0 [ 280.029939][T15840] tun_get_user+0xbbd/0x27c0 [ 280.029967][T15840] ? ref_tracker_alloc+0x1f2/0x2f0 [ 280.030100][T15840] tun_chr_write_iter+0x15e/0x210 [ 280.030196][T15840] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 280.030284][T15840] vfs_write+0x5a6/0x9f0 [ 280.030463][T15840] ksys_write+0xdc/0x1a0 [ 280.030534][T15840] __x64_sys_write+0x40/0x50 [ 280.030601][T15840] x64_sys_call+0x2847/0x3000 [ 280.030700][T15840] do_syscall_64+0xc0/0x2a0 [ 280.030854][T15840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.030929][T15840] RIP: 0033:0x7f8598e6b58e [ 280.030989][T15840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.031071][T15840] RSP: 002b:00007f8597906fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.031144][T15840] RAX: ffffffffffffffda RBX: 00007f85979076c0 RCX: 00007f8598e6b58e [ 280.031209][T15840] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 280.031262][T15840] RBP: 00007f8597907090 R08: 0000000000000000 R09: 0000000000000000 [ 280.031320][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.031363][T15840] R13: 00007f8599126038 R14: 00007f8599125fa0 R15: 00007ffe32fc8bb8 [ 280.031433][T15840] [ 280.237779][ T12] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.247060][T15820] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.286161][T15643] team0: Port device team_slave_0 added [ 280.313144][T15820] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.350146][T15856] loop7: detected capacity change from 0 to 512 [ 280.360242][T15643] team0: Port device team_slave_1 added [ 280.368459][T15856] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 280.401628][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.414784][T15856] EXT4-fs (loop7): 1 truncate cleaned up [ 280.447184][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.458588][T15856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.473116][T15643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.480137][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.480242][T15643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.502894][T15643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.524566][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.550549][T15643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.618570][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.639652][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.695124][T15874] loop4: detected capacity change from 0 to 128 [ 280.717329][T15874] FAT-fs (loop4): bogus logical sector size 2134 [ 280.723785][T15874] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 280.733247][T15874] FAT-fs (loop4): Can't find a valid FAT filesystem [ 280.749490][T15643] hsr_slave_0: entered promiscuous mode [ 280.755898][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.779072][T15643] hsr_slave_1: entered promiscuous mode [ 280.800521][T15643] debugfs: 'hsr0' already exists in 'hsr' [ 280.806342][T15643] Cannot create hsr debugfs directory [ 280.874151][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3840'. [ 280.886381][T15887] vlan2: entered promiscuous mode [ 280.891596][T15887] gretap0: entered promiscuous mode [ 281.033834][ T29] audit: type=1326 audit(1769357467.143:37440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.7.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8598eaacb9 code=0x7ffc0000 [ 281.082917][ T29] audit: type=1326 audit(1769357467.154:37441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.7.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8598eaacb9 code=0x7ffc0000 [ 281.106664][ T29] audit: type=1326 audit(1769357467.154:37442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.7.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8598eaacb9 code=0x7ffc0000 [ 281.130452][ T29] audit: type=1326 audit(1769357467.154:37443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.7.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8598eaacb9 code=0x7ffc0000 [ 281.154143][ T29] audit: type=1326 audit(1769357467.154:37444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.7.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8598eaacb9 code=0x7ffc0000 [ 281.177792][ T29] audit: type=1326 audit(1769357467.164:37445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.7.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8598eaacb9 code=0x7ffc0000 [ 281.201394][ T29] audit: type=1326 audit(1769357467.164:37446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.7.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8598eaacb9 code=0x7ffc0000 [ 281.225640][ T29] audit: type=1326 audit(1769357467.238:37447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.7.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8598eaacb9 code=0x7ffc0000 [ 281.351598][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3845'. [ 281.407770][T15917] loop4: detected capacity change from 0 to 128 [ 281.580195][T15643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 281.614925][T15643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 281.636773][T15935] loop2: detected capacity change from 0 to 512 [ 281.645461][T15643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.677358][T15935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 281.689627][T15643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.758546][T15935] EXT4-fs (loop2): 1 truncate cleaned up [ 281.765429][T15935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.779805][T15938] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3850'. [ 281.828878][T15643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.848262][T15643] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.864522][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.871675][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.898954][T15400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.928245][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.935370][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.063817][T15955] netlink: 'syz.2.3852': attribute type 5 has an invalid length. [ 282.079042][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 282.107879][T15955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15955 comm=syz.2.3852 [ 282.159979][T15643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.284203][T15994] IPv6: sit1: Disabled Multicast RS [ 282.394819][T16008] netlink: 'syz.7.3862': attribute type 5 has an invalid length. [ 282.418492][T15643] veth0_vlan: entered promiscuous mode [ 282.446417][T15643] veth1_vlan: entered promiscuous mode [ 282.528134][T15643] veth0_macvtap: entered promiscuous mode [ 282.556704][T15643] veth1_macvtap: entered promiscuous mode [ 282.590692][T15643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.622200][T15643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.666860][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.726505][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.795476][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'. [ 282.961292][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3866'. [ 283.003156][ T9115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.060636][ T9115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.110135][T16040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3868'. [ 283.288802][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3871'. [ 283.300027][T16052] SELinux: failed to load policy [ 283.333477][T16052] FAULT_INJECTION: forcing a failure. [ 283.333477][T16052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.346704][T16052] CPU: 1 UID: 0 PID: 16052 Comm: syz.7.3872 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 283.346811][T16052] Tainted: [W]=WARN [ 283.346819][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.346836][T16052] Call Trace: [ 283.346900][T16052] [ 283.346909][T16052] __dump_stack+0x1d/0x30 [ 283.346948][T16052] dump_stack_lvl+0x95/0xd0 [ 283.346974][T16052] dump_stack+0x15/0x1b [ 283.346995][T16052] should_fail_ex+0x263/0x280 [ 283.347017][T16052] should_fail+0xb/0x20 [ 283.347119][T16052] should_fail_usercopy+0x1a/0x20 [ 283.347150][T16052] _copy_from_user+0x1c/0xb0 [ 283.347203][T16052] ___sys_sendmsg+0xc1/0x1e0 [ 283.347261][T16052] __x64_sys_sendmsg+0xd4/0x160 [ 283.347293][T16052] x64_sys_call+0x17ba/0x3000 [ 283.347327][T16052] do_syscall_64+0xc0/0x2a0 [ 283.347429][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.347452][T16052] RIP: 0033:0x7f8598eaacb9 [ 283.347468][T16052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.347500][T16052] RSP: 002b:00007f8597907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.347521][T16052] RAX: ffffffffffffffda RBX: 00007f8599125fa0 RCX: 00007f8598eaacb9 [ 283.347536][T16052] RDX: 0000000000008804 RSI: 00002000000002c0 RDI: 0000000000000007 [ 283.347549][T16052] RBP: 00007f8597907090 R08: 0000000000000000 R09: 0000000000000000 [ 283.347563][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.347577][T16052] R13: 00007f8599126038 R14: 00007f8599125fa0 R15: 00007ffe32fc8bb8 [ 283.347618][T16052] [ 283.539357][T16065] loop3: detected capacity change from 0 to 512 [ 283.579810][T16065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.654692][T16065] EXT4-fs (loop3): 1 truncate cleaned up [ 283.667375][T16065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.828063][T15643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.005995][T16101] FAULT_INJECTION: forcing a failure. [ 284.005995][T16101] name failslab, interval 1, probability 0, space 0, times 0 [ 284.018814][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.4.3882 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 284.018860][T16101] Tainted: [W]=WARN [ 284.018877][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.018894][T16101] Call Trace: [ 284.018903][T16101] [ 284.018914][T16101] __dump_stack+0x1d/0x30 [ 284.018997][T16101] dump_stack_lvl+0x95/0xd0 [ 284.019027][T16101] dump_stack+0x15/0x1b [ 284.019091][T16101] should_fail_ex+0x263/0x280 [ 284.019180][T16101] should_failslab+0x8c/0xb0 [ 284.019210][T16101] __kvmalloc_node_noprof+0x148/0x680 [ 284.019244][T16101] ? nf_tables_newchain+0x11e4/0x1610 [ 284.019286][T16101] nf_tables_newchain+0x11e4/0x1610 [ 284.019331][T16101] ? should_failslab+0x8c/0xb0 [ 284.019419][T16101] nfnetlink_rcv+0xc1e/0x1720 [ 284.019470][T16101] netlink_unicast+0x5c0/0x690 [ 284.019508][T16101] netlink_sendmsg+0x5c8/0x6f0 [ 284.019590][T16101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.019628][T16101] __sock_sendmsg+0x145/0x170 [ 284.019670][T16101] ____sys_sendmsg+0x31e/0x4a0 [ 284.019706][T16101] ___sys_sendmsg+0x195/0x1e0 [ 284.019816][T16101] __x64_sys_sendmsg+0xd4/0x160 [ 284.019924][T16101] x64_sys_call+0x17ba/0x3000 [ 284.019960][T16101] do_syscall_64+0xc0/0x2a0 [ 284.019995][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.020053][T16101] RIP: 0033:0x7f855edcacb9 [ 284.020074][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.020100][T16101] RSP: 002b:00007f855d827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.020127][T16101] RAX: ffffffffffffffda RBX: 00007f855f045fa0 RCX: 00007f855edcacb9 [ 284.020147][T16101] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 284.020215][T16101] RBP: 00007f855d827090 R08: 0000000000000000 R09: 0000000000000000 [ 284.020234][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.020291][T16101] R13: 00007f855f046038 R14: 00007f855f045fa0 R15: 00007ffff98dbb38 [ 284.020318][T16101] [ 284.260726][T16124] loop2: detected capacity change from 0 to 1764 [ 284.344982][T16130] veth4: entered promiscuous mode [ 284.350163][T16130] veth4: entered allmulticast mode [ 284.375067][T16136] loop3: detected capacity change from 0 to 512 [ 284.387246][T16136] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 284.462544][T16136] EXT4-fs (loop3): 1 truncate cleaned up [ 284.468839][T16136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.542463][T16147] bond0: (slave bond_slave_1): Releasing backup interface [ 284.650998][T15643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.739313][T16170] loop3: detected capacity change from 0 to 1024 [ 284.764766][T16175] __nla_validate_parse: 2 callbacks suppressed [ 284.764789][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3901'. [ 284.916279][T16191] loop3: detected capacity change from 0 to 1024 [ 284.926726][T16191] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 284.949800][T16194] loop7: detected capacity change from 0 to 512 [ 284.956491][T16191] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 285.034511][T16194] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 285.045357][T16191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.074961][T16194] EXT4-fs (loop7): 1 truncate cleaned up [ 285.090546][T16194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.116972][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 285.116990][ T29] audit: type=1326 audit(1769357471.438:37470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d4acb9 code=0x7ffc0000 [ 285.147107][ T29] audit: type=1326 audit(1769357471.438:37471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d4acb9 code=0x7ffc0000 [ 285.149833][T16191] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.3907: corrupted in-inode xattr: bad e_name length [ 285.171957][ T29] audit: type=1326 audit(1769357471.438:37472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fddd0d4acb9 code=0x7ffc0000 [ 285.208001][ T29] audit: type=1326 audit(1769357471.438:37473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d4acb9 code=0x7ffc0000 [ 285.231670][ T29] audit: type=1326 audit(1769357471.438:37474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fddd0d4acb9 code=0x7ffc0000 [ 285.255248][ T29] audit: type=1326 audit(1769357471.438:37475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d4acb9 code=0x7ffc0000 [ 285.278975][ T29] audit: type=1326 audit(1769357471.438:37476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddd0d4acb9 code=0x7ffc0000 [ 285.302616][ T29] audit: type=1326 audit(1769357471.438:37477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0d4acb9 code=0x7ffc0000 [ 285.320079][T16191] EXT4-fs (loop3): Remounting filesystem read-only [ 285.326853][ T29] audit: type=1326 audit(1769357471.438:37478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddd0d0b58e code=0x7ffc0000 [ 285.356854][ T29] audit: type=1326 audit(1769357471.438:37479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.3.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fddd0d4bfd7 code=0x7ffc0000 [ 285.421670][T15643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.463449][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.527869][T16218] loop7: detected capacity change from 0 to 512 [ 285.535017][T16218] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 285.567398][T16218] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3913: bad orphan inode 131083 [ 285.646545][T16224] loop4: detected capacity change from 0 to 1024 [ 285.660467][T16218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.691464][T16224] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.698014][T16224] EXT4-fs: Ignoring removed bh option [ 285.726597][T16224] EXT4-fs: Ignoring removed nobh option [ 285.794008][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.813699][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3923'. [ 285.838484][T16224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.905015][T16251] loop3: detected capacity change from 0 to 1764 [ 286.073701][T16269] loop2: detected capacity change from 0 to 2048 [ 286.089799][T16275] loop7: detected capacity change from 0 to 2048 [ 286.103886][T16275] EXT4-fs: Ignoring removed oldalloc option [ 286.135156][T16275] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 286.159196][T16275] System zones: 0-7 [ 286.163611][T16275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.196029][T10167] Alternate GPT is invalid, using primary GPT. [ 286.202537][T10167] loop2: p1 p2 p3 [ 286.209832][T16275] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.3928: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 286.249272][T16286] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3931'. [ 286.271354][T16275] EXT4-fs (loop7): Remounting filesystem read-only [ 286.277350][T16269] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 286.334355][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.416380][ T3001] Alternate GPT is invalid, using primary GPT. [ 286.422770][ T3001] loop2: p1 p2 p3 [ 286.530501][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 286.540599][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 286.551984][ T9865] udevd[9865]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 286.569509][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'. [ 286.587012][T16317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3935'. [ 286.678314][T16333] loop2: detected capacity change from 0 to 736 [ 286.761062][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3941'. [ 286.847854][T16355] loop2: detected capacity change from 0 to 1024 [ 286.861779][T16355] EXT4-fs: Ignoring removed bh option [ 286.874455][T11088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.942548][T16355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.964778][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3949'. [ 286.982036][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3949'. [ 286.998188][T15400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.060427][T16383] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.070914][T16383] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.199181][T16383] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.209664][T16383] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.267825][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3955'. [ 287.292431][T16406] loop7: detected capacity change from 0 to 256 [ 287.321013][T16383] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.331498][T16383] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.366247][T16411] loop4: detected capacity change from 0 to 512 [ 287.402039][T16411] EXT4-fs: Ignoring removed i_version option [ 287.408149][T16411] EXT4-fs: inline encryption not supported [ 287.415277][T16383] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.424320][T16411] EXT4-fs: Ignoring removed i_version option [ 287.425733][T16383] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.459323][T16418] geneve2: entered promiscuous mode [ 287.464761][T16418] geneve2: entered allmulticast mode [ 287.465409][T16411] EXT4-fs (loop4): 1 orphan inode deleted [ 287.485109][T16411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.498072][ T9115] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.506331][ T9115] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.518024][T16411] netlink: 792 bytes leftover after parsing attributes in process `syz.4.3956'. [ 287.541568][ T9115] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.549911][ T9115] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.575066][T11088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.584116][ T9115] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.592403][ T9115] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.600701][ T9115] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.609132][ T9115] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.755322][T16436] bond3: entered promiscuous mode [ 287.776258][T16436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.834235][T16436] bridge2: entered promiscuous mode [ 288.006219][T16467] loop3: detected capacity change from 0 to 128 [ 288.024009][T16467] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 288.057913][T16467] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.141567][T16467] ext2 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.178895][T10167] loop7: p1 p3 < > p4 [ 288.210328][T10167] loop7: p4 size 720896 extends beyond EOD, truncated [ 288.278187][T16425] loop7: p1 p3 < > p4 [ 288.294073][T16425] loop7: p4 size 720896 extends beyond EOD, truncated [ 288.341383][ T3001] loop7: p1 p3 < > p4 [ 288.358728][ T3001] loop7: p4 size 720896 extends beyond EOD, truncated [ 288.511588][T15643] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.742613][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 288.755647][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 288.760824][ T9865] udevd[9865]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 288.845314][ T9865] udevd[9865]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 288.856501][T13960] udevd[13960]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 288.871008][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 289.021040][T16561] FAULT_INJECTION: forcing a failure. [ 289.021040][T16561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.034253][T16561] CPU: 1 UID: 0 PID: 16561 Comm: syz.2.3993 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.034289][T16561] Tainted: [W]=WARN [ 289.034366][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.034380][T16561] Call Trace: [ 289.034387][T16561] [ 289.034395][T16561] __dump_stack+0x1d/0x30 [ 289.034454][T16561] dump_stack_lvl+0x95/0xd0 [ 289.034479][T16561] dump_stack+0x15/0x1b [ 289.034522][T16561] should_fail_ex+0x263/0x280 [ 289.034551][T16561] should_fail+0xb/0x20 [ 289.034576][T16561] should_fail_usercopy+0x1a/0x20 [ 289.034609][T16561] _copy_from_user+0x1c/0xb0 [ 289.034700][T16561] ___sys_sendmsg+0xc1/0x1e0 [ 289.034797][T16561] __sys_sendmmsg+0x185/0x320 [ 289.034875][T16561] __x64_sys_sendmmsg+0x57/0x70 [ 289.034901][T16561] x64_sys_call+0x1e28/0x3000 [ 289.034989][T16561] do_syscall_64+0xc0/0x2a0 [ 289.035029][T16561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.035113][T16561] RIP: 0033:0x7f123874acb9 [ 289.035216][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.035244][T16561] RSP: 002b:00007f12371a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 289.035272][T16561] RAX: ffffffffffffffda RBX: 00007f12389c5fa0 RCX: 00007f123874acb9 [ 289.035293][T16561] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 289.035323][T16561] RBP: 00007f12371a7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.035337][T16561] R10: 0000000000046000 R11: 0000000000000246 R12: 0000000000000001 [ 289.035351][T16561] R13: 00007f12389c6038 R14: 00007f12389c5fa0 R15: 00007ffeec27a448 [ 289.035445][T16561] [ 289.042701][T16567] netlink: zone id is out of range [ 289.184624][T16570] EXT4-fs: quotafile must be on filesystem root [ 289.192333][T16567] netlink: zone id is out of range [ 289.246277][T16567] netlink: zone id is out of range [ 289.263603][T16570] EXT4-fs: Invalid want_extra_isize 0 [ 289.270672][T16567] netlink: set zone limit has 8 unknown bytes [ 289.409366][T16583] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)! [ 289.419618][T16583] EXT4-fs (loop3): group descriptors corrupted! [ 289.444768][T16595] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.483566][T16595] EXT4-fs (loop4): 1 truncate cleaned up [ 289.492347][T16595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.584634][T16604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.611608][T16604] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.625065][T11088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.694813][T16611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.868811][T16611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.884786][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 289.884807][ T29] audit: type=1400 audit(1769357476.446:37888): avc: denied { create } for pid=16629 comm="syz.4.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 289.925337][ T29] audit: type=1400 audit(1769357476.477:37889): avc: denied { module_request } for pid=16629 comm="syz.4.4010" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 289.948032][T16637] __nla_validate_parse: 18 callbacks suppressed [ 289.948049][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4011'. [ 289.954097][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.975153][ T29] audit: type=1400 audit(1769357476.540:37890): avc: denied { sys_module } for pid=16629 comm="syz.4.4010" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 290.021599][T16611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.063668][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4012'. [ 290.092403][T16611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.115334][T16645] netlink: 'syz.4.4013': attribute type 10 has an invalid length. [ 290.128548][ T29] audit: type=1400 audit(1769357476.677:37891): avc: denied { create } for pid=16644 comm="syz.4.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.148407][ T29] audit: type=1400 audit(1769357476.687:37892): avc: denied { setopt } for pid=16644 comm="syz.4.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.176384][T16645] macvlan1: entered promiscuous mode [ 290.182046][T16645] macvlan1: entered allmulticast mode [ 290.191357][ T29] audit: type=1400 audit(1769357476.750:37893): avc: denied { getopt } for pid=16644 comm="syz.4.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.194728][T16645] veth1_vlan: entered allmulticast mode [ 290.217428][T16651] netlink: 'syz.7.4016': attribute type 1 has an invalid length. [ 290.240625][ T29] audit: type=1400 audit(1769357476.803:37894): avc: denied { map_read map_write } for pid=16646 comm="syz.8.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 290.262190][T16645] team0: Port device macvlan1 added [ 290.281234][T16651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.303192][T16663] bond1: (slave ip6gretap0): making interface the new active one [ 290.359573][T16663] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 290.372028][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'. [ 290.373835][ T9115] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.400438][T16667] geneve2: entered promiscuous mode [ 290.405909][T16667] geneve2: entered allmulticast mode [ 290.424248][ T29] audit: type=1400 audit(1769357476.950:37895): avc: denied { write } for pid=16650 comm="syz.7.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.444025][ T29] audit: type=1400 audit(1769357476.950:37896): avc: denied { connect } for pid=16650 comm="syz.7.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.463789][ T29] audit: type=1400 audit(1769357476.950:37897): avc: denied { name_connect } for pid=16650 comm="syz.7.4016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 290.491103][ T9115] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.503681][T16670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4021'. [ 290.513120][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.539202][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.613225][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4024'. [ 290.676240][T16692] set_capacity_and_notify: 7 callbacks suppressed [ 290.676257][T16692] loop2: detected capacity change from 0 to 512 [ 290.690795][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4026'. [ 291.032495][T16692] EXT4-fs (loop2): 1 orphan inode deleted [ 291.038837][T16692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.052890][T16692] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.052896][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 291.086850][T15400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.579661][T16743] loop7: detected capacity change from 0 to 512 [ 291.651203][T16747] 9p: Bad value for 'rfdno' [ 291.690828][T16735] loop3: detected capacity change from 0 to 32768 [ 291.700583][T16743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.732265][T16743] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.756581][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.085240][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4040'. [ 292.199588][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4049'. [ 292.256102][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4053'. [ 292.288314][T16808] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4054'. [ 292.506025][T16824] program syz.7.4060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.687291][T16844] loop7: detected capacity change from 0 to 512 [ 292.711143][T16844] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 292.720097][T16844] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 292.747845][T16844] EXT4-fs (loop7): 1 truncate cleaned up [ 292.755292][T16844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.769542][T16844] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #2: block 4: comm syz.7.4069: lblock 0 mapped to illegal pblock 4 (length 1) [ 292.784583][T16844] EXT4-fs (loop7): Remounting filesystem read-only [ 292.818655][ T9517] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.855502][T16853] FAULT_INJECTION: forcing a failure. [ 292.855502][T16853] name failslab, interval 1, probability 0, space 0, times 0 [ 292.868288][T16853] CPU: 0 UID: 0 PID: 16853 Comm: syz.3.4071 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 292.868357][T16853] Tainted: [W]=WARN [ 292.868366][T16853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.868383][T16853] Call Trace: [ 292.868390][T16853] [ 292.868463][T16853] __dump_stack+0x1d/0x30 [ 292.868497][T16853] dump_stack_lvl+0x95/0xd0 [ 292.868570][T16853] dump_stack+0x15/0x1b [ 292.868592][T16853] should_fail_ex+0x263/0x280 [ 292.868614][T16853] should_failslab+0x8c/0xb0 [ 292.868639][T16853] kmem_cache_alloc_noprof+0x68/0x490 [ 292.868701][T16853] ? getname_flags+0x7f/0x3b0 [ 292.868797][T16853] getname_flags+0x7f/0x3b0 [ 292.868828][T16853] do_sys_openat2+0x60/0x150 [ 292.868869][T16853] __x64_sys_openat+0xf2/0x120 [ 292.868899][T16853] x64_sys_call+0x2b07/0x3000 [ 292.868926][T16853] do_syscall_64+0xc0/0x2a0 [ 292.868959][T16853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.869037][T16853] RIP: 0033:0x7fddd0d0b58e [ 292.869054][T16853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.869139][T16853] RSP: 002b:00007fddcf785b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.869195][T16853] RAX: ffffffffffffffda RBX: 00007fddcf7866c0 RCX: 00007fddd0d0b58e [ 292.869215][T16853] RDX: 0000000000000002 RSI: 00007fddcf785c00 RDI: ffffffffffffff9c [ 292.869233][T16853] RBP: 00007fddcf786090 R08: 0000000000000000 R09: 0000000000000000 [ 292.869246][T16853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.869259][T16853] R13: 00007fddd0fc6128 R14: 00007fddd0fc6090 R15: 00007fffee5f68f8 [ 292.869279][T16853] [ 293.053190][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 293.261329][T16877] loop4: detected capacity change from 0 to 512 [ 293.277425][T16877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 293.289694][T16877] EXT4-fs (loop4): 1 truncate cleaned up [ 293.295852][T16877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.342416][T16883] loop2: detected capacity change from 0 to 512 [ 293.351054][T16883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.363203][T11088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.395490][T16883] EXT4-fs (loop2): 1 truncate cleaned up [ 293.403666][T16883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.463307][T16894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.472824][T16894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.512555][T15400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.297805][T16943] loop3: detected capacity change from 0 to 128 [ 294.347194][T16943] ================================================================== [ 294.355331][T16943] BUG: KCSAN: data-race in _copy_to_iter / fat_mirror_bhs [ 294.362521][T16943] [ 294.364884][T16943] read to 0xffff88814b8c7000 of 1536 bytes by task 10167 on cpu 0: [ 294.372811][T16943] _copy_to_iter+0x130/0xea0 [ 294.377457][T16943] copy_page_to_iter+0x18f/0x2d0 [ 294.380591][T16949] netlink: 'syz.8.4103': attribute type 1 has an invalid length. [ 294.382426][T16943] filemap_read+0x407/0xa10 [ 294.394700][T16943] blkdev_read_iter+0x22d/0x2e0 [ 294.399596][T16943] vfs_read+0x6c0/0x7f0 [ 294.403811][T16943] ksys_read+0xdc/0x1a0 [ 294.408020][T16943] __x64_sys_read+0x40/0x50 [ 294.412577][T16943] x64_sys_call+0x2889/0x3000 [ 294.417300][T16943] do_syscall_64+0xc0/0x2a0 [ 294.421856][T16943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.427788][T16943] [ 294.430140][T16943] write to 0xffff88814b8c7000 of 2048 bytes by task 16943 on cpu 1: [ 294.438138][T16943] fat_mirror_bhs+0x1df/0x320 [ 294.442883][T16943] fat_alloc_clusters+0xb48/0xc50 [ 294.447944][T16943] fat_get_block+0x258/0x5e0 [ 294.452572][T16943] __block_write_begin_int+0x400/0xf90 [ 294.458070][T16943] cont_write_begin+0x5fe/0x970 [ 294.462965][T16943] fat_write_begin+0x4f/0xe0 [ 294.467588][T16943] generic_perform_write+0x183/0x490 [ 294.472904][T16943] __generic_file_write_iter+0x9e/0x120 [ 294.478476][T16943] generic_file_write_iter+0x8d/0x310 [ 294.483885][T16943] vfs_write+0x5a6/0x9f0 [ 294.488189][T16943] ksys_write+0xdc/0x1a0 [ 294.492445][T16943] __x64_sys_write+0x40/0x50 [ 294.497063][T16943] x64_sys_call+0x2847/0x3000 [ 294.501768][T16943] do_syscall_64+0xc0/0x2a0 [ 294.506302][T16943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.512225][T16943] [ 294.514561][T16943] Reported by Kernel Concurrency Sanitizer on: [ 294.520729][T16943] CPU: 1 UID: 0 PID: 16943 Comm: syz.3.4099 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.532130][T16943] Tainted: [W]=WARN [ 294.535951][T16943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.546030][T16943] ================================================================== [ 294.568726][T16943] loop2: detected capacity change from 0 to 7 [ 294.815380][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 294.815443][ T29] audit: type=1400 audit(1769357481.611:37989): avc: denied { unmount } for pid=15643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 294.996189][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 294.996639][ T4308] Bluetooth: hci0: Opcode 0x1003 failed: -110