last executing test programs: 46.497433895s ago: executing program 2 (id=37): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}}, 0x0) process_madvise(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)="17", 0x1}], 0x2, 0x17, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0) getpid() (async) syz_pidfd_open(r0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}}, 0x0) (async) process_madvise(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)="17", 0x1}], 0x2, 0x17, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0) (async) 46.41574237s ago: executing program 2 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffff1}, [@generic={0x91, 0x1, 0x1, 0x5d}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mmap(&(0x7f0000374000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x2000000009, 0x8, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060300000000000000000007000006050001000700000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640000000040500050002000000050004000100000013000300686182683a6e65742c696661636500007dfe8dafdf5f5436eab2b2e96bc8d0a1f3f6c521c200403d5b9192ff56d18ed3338c1116693f8f580e34d4c49edbc9e27f42bc2395d5c2462b22d920e389d02c44721fdf167e9c433ff86cd5f9ebb2d31c14cb14c69ca625f88ded391dc977bb89915785411dc8811fd24640c2abd62d358a966b3610b17b310873406b399875d70cfed56a9ec6cde719f97a4454a3cfdf8b"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffff1}, [@generic={0x91, 0x1, 0x1, 0x5d}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) mmap(&(0x7f0000374000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x2000000009, 0x8, 0x3) (async) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060300000000000000000007000006050001000700000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640000000040500050002000000050004000100000013000300686182683a6e65742c696661636500007dfe8dafdf5f5436eab2b2e96bc8d0a1f3f6c521c200403d5b9192ff56d18ed3338c1116693f8f580e34d4c49edbc9e27f42bc2395d5c2462b22d920e389d02c44721fdf167e9c433ff86cd5f9ebb2d31c14cb14c69ca625f88ded391dc977bb89915785411dc8811fd24640c2abd62d358a966b3610b17b310873406b399875d70cfed56a9ec6cde719f97a4454a3cfdf8b"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) (async) 46.356600643s ago: executing program 2 (id=42): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x20030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8006, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") 43.146482218s ago: executing program 2 (id=50): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@updpolicy={0x100, 0x19, 0x100, 0x70bd25, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x4e22, 0x0, 0x4e22, 0xff, 0xa, 0xa0, 0x80, 0x87}, {0x8000, 0x4, 0x2, 0x7, 0x4000000000000ae, 0x9, 0x2, 0xd}, {0x2, 0x8, 0x4, 0x972}, 0x1, 0x6e6bbf, 0x1, 0x0, 0x3, 0x2}, [@lastused={0xc, 0xf, 0x8}, @srcaddr={0x14, 0xd, @in=@broadcast}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e24, @in=@private=0xa010102}}, @lastused={0xc, 0xf, 0x1}]}, 0x100}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0xf1e0}}]}, 0x1, 0x5a4, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = syz_io_uring_setup(0xbd9, 0x0, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2c, 0x80, 0x2, 0x261}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x3, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r7, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r7, 0x22d0, 0x20, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 42.372826137s ago: executing program 2 (id=60): capset(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0}) r1 = gettid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2, 0x8, 0x8, 0x22, 0x5, r1}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0xb) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="0843055ed6e465f3d712e0f59c693507", 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xa2bbf000) prctl$PR_SET_SECCOMP(0x16, 0x5, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x485b, 0x1000, 0x3, 0x40004330, 0x0, r6}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1, 0xfff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r5, 0x1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000280)=""/28, 0x1c}], 0x2}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffa, 0x2}, 0xe) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x100, &(0x7f0000000300)=0x59, 0x0, 0x4) syslog(0x2, &(0x7f0000000640)=""/177, 0xb1) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f00000000c0)={0x1, 0x8, 0x10000, 0x4, 0x94, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c5017ee251c86e753938fd0cefe56700d405745ee03a591065992257deb80141e130fcc4259d2845b14ddcbf835301ffef0e63ff29ce447944b01fd71215d30a5ee1538de0aa485df20ee1269f5588ab24c5555560b44917d1c53767d7b776ea023c713574ae96fa17deb67dbf8123540eed001f1a4ac0f36048ba"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) 42.091357442s ago: executing program 2 (id=63): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, &(0x7f00000005c0)={0x0, 0x1, 0x80000}, 0x4d) (async) shutdown(r0, 0x0) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) listen(r0, 0x5) 42.056996903s ago: executing program 32 (id=63): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, &(0x7f00000005c0)={0x0, 0x1, 0x80000}, 0x4d) (async) shutdown(r0, 0x0) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) listen(r0, 0x5) 14.549281384s ago: executing program 5 (id=251): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2400000000000000290000000400000000000000000000006d475ac2dadbffcca441cee92b372821b8630705c0aa20951b697cfde65625e95bfb299aee7857bf496ee2fd7ec37e9190c8c8a8dad19eb5d28670eaca05aafe914d2c03290d2824e905160f198122e3ab6c9c6c359a6bac91d8d36d53f17ce0b5dcb90fdb4446469a769556b1c726d7e86e375c1313f35d9813f1f048e08d6f3820ded9700ee95be97dc0f44983ede0b1312305caa52e"], 0x18}, 0x440e0) r3 = accept4(r0, 0x0, &(0x7f0000000440), 0x100800) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r3) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x7b, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440007c7666077cd5110cf722de7389e00000a000000000000000100000d000000000100000005000000070000000000001205000000000000000000000d00000000001000000000000d00000000080000000000000700000000005f5f5f2e2e305f2e00"], 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x38}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @local}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000000)=0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x100c}], 0x1, 0x0, 0x0, 0x407006}, 0x164) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r5) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.472808188s ago: executing program 5 (id=253): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff2}, {0x5, 0xa}, {0x6, 0xfff2}}}, 0x24}}, 0x4000) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote, r3}, 0x4d) 14.376137383s ago: executing program 5 (id=255): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x50) lstat(0x0, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x146, &(0x7f0000000240)={0xfffffffffffffff9, 0x1, 0x5b, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e00000009000000000000000700000000200000", @ANYRES32, @ANYBLOB="6e020000000000000000000000000000000000005f96271fb2c775d2368b56bac5d2d6b9557b9b597da271d310fa4168aaa35ca3eb5aa0cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000030000000b00"/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x200008c0) r4 = syz_pidfd_open(0x0, 0x0) r5 = dup(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000000), 0x0, 0x0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20008000) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) fdatasync(r7) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x55430000) 13.338209287s ago: executing program 5 (id=262): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb000b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x18}, 0x8000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@max_dir_size_kb}, {@data_err_abort}, {@sysvgroups}, {@grpid}, {@data_err_ignore}, {@barrier}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') (async) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x1f8) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_delete(r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e23, @remote}}) openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x80, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 12.956164986s ago: executing program 5 (id=267): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000010) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x400000000000d07, 0xc0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000080), 0x0}, 0x20) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) socket$inet6(0xa, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/fscaps', 0x101000, 0xb2) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x7ff, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xb, 0xffffffffffffffff, 0xb) flistxattr(r3, 0x0, 0x0) clock_settime(0x7, &(0x7f00000000c0)={0x77359400}) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000580)='./cgroup\x00', 0x60000726) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000020000fd0a000000000000000900000000000000"], 0x4240) read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7800, 0x0, 0xd66}}) socket$inet6_udplite(0xa, 0x2, 0x88) 12.204148654s ago: executing program 5 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0xc0, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELRULE={0x248, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0xdf, 0x7, 0x1, 0x0, "7e90776f06216e8b459faf92876cc34ee3ea66a929cec41fb32a992ced6fcd70bbc07fc394887b42d1cdf93f9d1086b56a2ded023f0c5db251855a09fdbe08ac94c7da4e778fabf1a8bebd52113397fd3b2291c59df2089e60972ef28d303735ab7eae64dfba513bf1de223665c087bd0d4339ab12f1b9e8c56cc530373c8dd606b96d70ba23f4963b1d3defea9871a11092c19396ebed28403f0ba9141c719ca771bc2d27682496c72638c27f1aba176324a489c3155c5a285f00f5e63e8fd544c7bf6801327c5eadd3a2216306eb0a1fb09273e6ebc27b636b85"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "8decc791c8fcd889a8542aa692f1e44e24cd0030f46f3718c4d456c067691908d759712a9a48355f1a7d221a0a81c0090c31cf3e22275c32df8c59c22310d822ef642b83551c305b7b63"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8}]}}}]}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x706, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x52, 0x7, 0x1, 0x0, "af93fd02dada2b0edc32ad119c0c795c02306e8a7474bf34801424ddef433d4b088b95fab14a7a4643d2a7f7b255034a153fce9020e5a8540e68c412dd202265a34a042a79332f17330d366a8d6f"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3d4}}, 0x4) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x20004044) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6d50, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000680), 0x3) (async) fsetxattr(r0, &(0x7f00000006c0)=@random={'system.', 'redir\x00'}, &(0x7f0000000700)='\x00', 0x1, 0x3) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000740)={0x2, 'caif0\x00', 0x3}, 0x18) (async) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000780)=0x9, 0x4) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000800)=0x14) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000840)={0x5, 0x4, 0x6, 0x3ff, 0x2, "462a87664ab588192e0f01ea7a6d1068e79667", 0x81, 0x3ff}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x1810) (async) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ppoll(&(0x7f0000000a00)=[{r6, 0x204}, {r4}, {r3, 0x208}, {r2, 0x4}, {r3, 0x22}, {r5, 0x102}], 0x6, &(0x7f0000000a40), &(0x7f0000000a80)={[0xffffffffffffffff]}, 0x8) (async) fchdir(r2) (async) r7 = fcntl$dupfd(r6, 0x0, r2) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r8, 0x8, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa297}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000000}]}, 0x2c}}, 0x4842) (async) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000c40)) mount_setattr(r7, &(0x7f0000000c00)='./file0\x00', 0x1100, &(0x7f0000000c80)={0x89, 0x100003, 0x40000, {r9}}, 0x20) (async, rerun: 64) fchdir(r0) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000cc0)={0x0, 0x0}) prlimit64(r10, 0x5, 0x0, &(0x7f0000000d40)) (async) lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) (async, rerun: 32) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000e40)={0x66b, 0xfffffff7, 0x8, 0x6, 0x0, "699e99d6b4b8bb3b690d7b82dc5204694a5f39", 0xfff, 0x10}) (async, rerun: 32) r11 = syz_io_uring_complete(0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000e80)=0x200, 0x4) 12.172972636s ago: executing program 33 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0xc0, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELRULE={0x248, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0xdf, 0x7, 0x1, 0x0, "7e90776f06216e8b459faf92876cc34ee3ea66a929cec41fb32a992ced6fcd70bbc07fc394887b42d1cdf93f9d1086b56a2ded023f0c5db251855a09fdbe08ac94c7da4e778fabf1a8bebd52113397fd3b2291c59df2089e60972ef28d303735ab7eae64dfba513bf1de223665c087bd0d4339ab12f1b9e8c56cc530373c8dd606b96d70ba23f4963b1d3defea9871a11092c19396ebed28403f0ba9141c719ca771bc2d27682496c72638c27f1aba176324a489c3155c5a285f00f5e63e8fd544c7bf6801327c5eadd3a2216306eb0a1fb09273e6ebc27b636b85"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "8decc791c8fcd889a8542aa692f1e44e24cd0030f46f3718c4d456c067691908d759712a9a48355f1a7d221a0a81c0090c31cf3e22275c32df8c59c22310d822ef642b83551c305b7b63"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8}]}}}]}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x706, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x52, 0x7, 0x1, 0x0, "af93fd02dada2b0edc32ad119c0c795c02306e8a7474bf34801424ddef433d4b088b95fab14a7a4643d2a7f7b255034a153fce9020e5a8540e68c412dd202265a34a042a79332f17330d366a8d6f"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3d4}}, 0x4) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x20004044) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6d50, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000680), 0x3) (async) fsetxattr(r0, &(0x7f00000006c0)=@random={'system.', 'redir\x00'}, &(0x7f0000000700)='\x00', 0x1, 0x3) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000740)={0x2, 'caif0\x00', 0x3}, 0x18) (async) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000780)=0x9, 0x4) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000800)=0x14) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000840)={0x5, 0x4, 0x6, 0x3ff, 0x2, "462a87664ab588192e0f01ea7a6d1068e79667", 0x81, 0x3ff}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x1810) (async) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ppoll(&(0x7f0000000a00)=[{r6, 0x204}, {r4}, {r3, 0x208}, {r2, 0x4}, {r3, 0x22}, {r5, 0x102}], 0x6, &(0x7f0000000a40), &(0x7f0000000a80)={[0xffffffffffffffff]}, 0x8) (async) fchdir(r2) (async) r7 = fcntl$dupfd(r6, 0x0, r2) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r8, 0x8, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa297}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000000}]}, 0x2c}}, 0x4842) (async) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000c40)) mount_setattr(r7, &(0x7f0000000c00)='./file0\x00', 0x1100, &(0x7f0000000c80)={0x89, 0x100003, 0x40000, {r9}}, 0x20) (async, rerun: 64) fchdir(r0) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000cc0)={0x0, 0x0}) prlimit64(r10, 0x5, 0x0, &(0x7f0000000d40)) (async) lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) (async, rerun: 32) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000e40)={0x66b, 0xfffffff7, 0x8, 0x6, 0x0, "699e99d6b4b8bb3b690d7b82dc5204694a5f39", 0xfff, 0x10}) (async, rerun: 32) r11 = syz_io_uring_complete(0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000e80)=0x200, 0x4) 5.867895399s ago: executing program 4 (id=329): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000340)="ebc64523d49b", 0x6}, {0x0}, {&(0x7f00000004c0)}], 0x4}}], 0x1, 0x4) r1 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) io_uring_enter(r4, 0x6c28, 0xaa86, 0x4, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.135761018s ago: executing program 1 (id=344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0000000000701080000000000000000000000010c00034000000000000000080900010073797a30000000001c"], 0xb0}, 0x1, 0x0, 0x0, 0x8458}, 0x80) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=l']) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='pim6reg0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket(0x1e, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x110044, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), 0x0, 0x361, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, 0x0, 0x0) r10 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.028064763s ago: executing program 4 (id=345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f00000007c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) listen(r2, 0x7) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010030bd7000fddbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="4bebdcce2b893800108e382cb8eef9007195000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) process_vm_readv(r1, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x70}}, 0x8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000800)={[{@noload}]}, 0x1, 0x544, &(0x7f0000001300)="$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") syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="200800f2", @ANYRES16=r4, @ANYBLOB="00042dbd7000ffdbdf25200000000c0006000200000000000000"], 0x20}}, 0x44800) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a00)={@nfc_llcp={0x27, r7, 0xffffffffffffffff, 0x7, 0x5, 0x8, "4e30a9ff298ebb7e47ad93b6ce45b1297a0443890a6586ba0a14e2612a238a69308189bfc8b8c7af07016a9400a2729cc6aa92b82a42f7cb93425e5967b0bc", 0x33}, {&(0x7f0000000880)=""/149, 0x95}, &(0x7f00000005c0)}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0xfff, 0x2, @local, @loopback={0x0, 0x460c6}, 0x7800, 0x0, 0x25a3, 0x6}}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeac}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0241b9a1a183a1632cacb1260000001337cbd7a82445dac1deed43d1dcba48f29895070b5bbf8b809b9a75b659da287d6a94328f10d814f4be733f3aac", @ANYRES32=r6, @ANYBLOB="05000f000600000005000f000600000008000100", @ANYRES32=r7, @ANYRES8=r8, @ANYRES16=r9, @ANYBLOB="08000100", @ANYRES64=r8, @ANYRESOCT=0x0], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 3.53130933s ago: executing program 0 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x10, 0x1ff, 0x2, 0x29d3}, 0x80000006, 0x0, 0xfffffffd, 0x5, 0x5, 0x0, 0x1, 0x5, 0x4, 0x401, {0x101, 0xffffffff, 0x5, 0x0, 0x2, 0x9}}}}]}, 0x78}}, 0x20040084) r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) ptrace$getsig(0x4202, r2, 0x16, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56141, 0x4001, 0xfffffdf9, {0x0, 0x0, 0x0, r1, {}, {0xe}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.506275611s ago: executing program 1 (id=350): openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x4000, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3.428101054s ago: executing program 0 (id=351): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000140)=ANY=[@ANYBLOB='check=relaxed,map=off,hide,map=normal,cruft,hide,dmo000800,session=0x0000000000000054,check=relaxed,\x00'/116], 0x1, 0x557, &(0x7f0000000580)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000028c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0353fba21be692af3700290000030900010073797a300000000040000000090a010400000000000000000700000308000a40fffffffc0900020073797a300000000009000100cc79781773797a300000000004001280080003400000012014000000100001000000000000000000b1f895a0884c18b02ea3ca00f9b9f638fa9ada9fbe90c0fb3358a54484fa603d134fdaef734be2baf1a5d3e91814c3fc11426ae6"], 0x88}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20054800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002980)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/210, 0xd2}], 0x1, &(0x7f0000000c40)=""/61, 0x3d}, 0x3}, {{&(0x7f0000000c80)=@qipcrtr, 0x80, &(0x7f0000001180)=[{&(0x7f0000000d00)=""/198, 0xc6}, {&(0x7f0000000e00)=""/143, 0x8f}, {&(0x7f0000000ec0)=""/46, 0x2e}, {&(0x7f0000000f00)=""/207, 0xcf}, {&(0x7f0000001000)=""/244, 0xf4}, {&(0x7f0000001100)=""/66, 0x42}], 0x6, &(0x7f0000001200)=""/67, 0x43}, 0x7f}, {{&(0x7f0000001280)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/178, 0xb2}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/162, 0xa2}, {&(0x7f0000002580)=""/126, 0x7e}, {&(0x7f0000002600)=""/98, 0x62}, {&(0x7f0000002680)=""/88, 0x58}, {&(0x7f0000002700)=""/188, 0xbc}, {&(0x7f00000027c0)=""/169, 0xa9}, {&(0x7f0000002880)=""/6, 0x6}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/13, 0xd}, {&(0x7f0000003a80)=""/151, 0x97}, {&(0x7f0000003b40)=""/151, 0x97}], 0xe}, 0x6}], 0x3, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) file_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x4062, 0x10000, 0x100, 0xfff, 0x80}, 0x18, 0x800) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x1, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) r8 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) r11 = open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) sendfile(r11, r11, 0x0, 0x1000000201005) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3.426291954s ago: executing program 1 (id=352): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x8000, &(0x7f0000676000/0x1000)=nil, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14aec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6057080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f498707000000000000cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd9432086c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5e3236dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f136174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7c85d94ffb07d9be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x119) 3.384322297s ago: executing program 1 (id=353): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x42040) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000002c0)={{r0}, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xdf}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$LOOP_CHANGE_FD(r0, 0xc01070ce, 0xffffffffffffffff) 3.361298208s ago: executing program 1 (id=354): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x17ff, 0x9f78, 0x101, 0xec}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aed000000000000000000070000000900010073797a30000000005c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f7461000000100002800c000140000000000000"], 0xa4}}, 0x0) 3.072185432s ago: executing program 4 (id=356): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x1, 0x700, 0x90, 0xffffffff, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @local, {[@noop]}}}}}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="720ac4ff0000000071108d000000000095000000000000000aabe2fc0300004a29b60310224def296c65af3f86c637be6619bd06ee95340a53c2cfda0c09b9d20a284484898f9626f57cd750f36bd55512cbdc5986d3d6d68888bf1f74e73eab7416f0542c000c4707"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020900000200000000000000000300006a4a7973553a8121744d7e923772284772f5ddd196a7fdabae3b2f95271dd0967e3047f23fec21e74d292da807bb4d"], 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r3, 0x0, 0x2) fchdir(r9) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) getsockopt$inet_int(r10, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.374741038s ago: executing program 3 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffffff9, 0x20000) 2.35476538s ago: executing program 1 (id=358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000008094000100f3ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0xb, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03006037698cff9e14d186dd", 0x0, 0xa0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x28}, 0x4c) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r8, &(0x7f0000000000)=""/36, 0x24) getdents(r8, 0xffffffffffffffff, 0x7a) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600"/22, 0x39}], 0x1, 0x3e42, 0x407ff) 2.224931076s ago: executing program 3 (id=360): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@block_validity}, {@journal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x43dc}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}, {@init_itable_val}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_lt={'euid<', r2}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '!'}}, {@euid_lt}, {@fowner_eq}, {@uid_lt}, {@obj_type}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) r4 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) 2.14683319s ago: executing program 4 (id=361): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@nouid32}, {}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$eJzs3EtvG1UbAOB3xk16+3L5Srn0AjUUREQhadICFWIDAqkbJCRYwDKkoQpNW9QEiVYVLQgVsUL8AmCJxC9gBRsErEBsYY+QKtQNhQUymvEMceIkOHZdN/XzSGOfM5ec887Mic/M8TiAvlXNXpKIWkT8HBEj9ezyFar1t+vXLs78ee3iTBK12ku/J/l6f1y7OFOuWm63s8iMpRHp+0nsW6XchfMXTk3Pz8+eK/ITi6ffnFg4f+GxudPTJ2dPzp6ZOnbs6JHJJ5+YevyGxDmU1XXvO2f37zn+6scvzNTite++yOr7v2J5Yxx1ox2XWY3q8n2ZG8xfH+r4r99ahhrSyZYeVoQNqUREdrgG8vY/EpVYOngj8fx7Pa0c0FW1Wq22tWlupUxcrgG3sSR6XQOgN8oP+uz6t5xuYvej564+U78AyuK+Xkz1JVsizd621a/Yh7pUfjUiXrn81yfZFKveh1jdti7VBwC4/X2V9X8eXa3/N5zc1bDecDE2NBoRhyJiV0TcERG7I+LOiMjWvTsi7tlg+dUV+eb+z4/b2wqsRVn/7+libGt5/y8tVxmtFLmhPP6B5PW5+dnDxT4Zi4GtWX5ynTK+fu6nj9Za1tj/y6as/LIvWNTjty0rbtCdmF6c7iTmRk/N1d+b41+6L5BExJ6I2Lt0udCybJ/NPfL5/iw9vLN5+X/Hv44bMM5U+yzi4Xr8l2NF/KWkXtJa45MT22J+9vBEeVY0+/6HKy825gca0h3FfwNcfTdixxrHP1c2g3K8dmHjZVz55YM1r2naPf8Hk5fz9GAx7+3pxcVzkxGDxYxl86eWti3z5fpZ/GMHV4t/ONkV8fenxXb7IiI7ie+NiPsi4kBR9/sj4oGIOLhO/N8+++Ab6++h3h7/E+sd/4jRpHG8vo1E5dQ3X65VfmvH/2ieGivmtPL/r9UKdrLvAAAAYLNI8+/AJ+n4v+k0HR+vf4d/d+xI588uLB6qxltnTtS/Kz8aA2l5p2uk4X7oZHFvuMxPrcgfiYj/53cUt+f58Zmz890aUwdas3ON9p/5tdLr2gFdt6FxtOYn2oBNzPOa0KcGtH/oZ9o/9C/tH/rXau3/UsT1HlQFuMl8/kP/0v6hf2n/0L+0f+hLzY/Elz+30s6T/kuJXcc72nxTJT6M9jbfnicqXapYNP5oRxcSkfZ+z7edSG+FahwoElsjotWtLnX1mK48fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa/fwIAAP//5w/pXg==") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000002010108815da2af0000000002000000300001802c00018014000300fe8000000000000000000000000000aa14000400200100000000000000000000000000000c0019800800010006"], 0x50}, 0x1, 0x0, 0x0, 0x10050}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) 2.044548815s ago: executing program 6 (id=362): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, 0x35a05, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x1075, 0x6, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1c0000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "059ac1403a78edf9", "3d74aa70b18336d0d00e321d2cd8ec42", '*]rm', "7d44488712c6ab67"}, 0x28) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.996056938s ago: executing program 0 (id=363): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x4000, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.821309307s ago: executing program 0 (id=364): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x9, &(0x7f0000000280)=[{0x9, 0x8, 0x6, 0x2}, {0x7, 0xfb, 0xb, 0x200}, {0x7fff, 0xf, 0x40, 0x9}, {0x800, 0x3, 0x6, 0x4}, {0x7, 0xe0, 0x2, 0x1}, {0x7, 0x7f, 0x6, 0x9}, {0x200, 0x2, 0x1, 0x3ff}, {0xa, 0x10, 0x10, 0x9}, {0x9f8, 0x86, 0x8, 0xfffff653}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000003c0)={"98169c13adb265a3d270ef98e3ef2a5b", 0x0, r4, {0x9, 0xfffffff8}, {0x4, 0x2}, 0x80000001, [0x81, 0x8000000000000001, 0x8, 0x2, 0xfffffffffffffe01, 0x1, 0x8000000000000000, 0xfffffffffffffe01, 0x9, 0x5, 0x8000000000000001, 0x15526b6f, 0x7, 0xe, 0x9, 0x4]}) setfsuid(0xee00) 1.776502379s ago: executing program 4 (id=365): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000008000000000000000000000000000000000000000000000000000000000000000000000000000008a91ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000"]}, 0x138) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000100001040200"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000003c0012800e0001006970366772657461700000002800028014000700fe88000000000000000000000000000106000e0022"], 0x5c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0xffffffff}, {0x7}, {0x6, 0x2}]}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000240)=""/103, 0x67}) epoll_wait(r3, &(0x7f0000000480), 0x0, 0x5867bddc) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x10, 0x220002) ioctl$LOOP_CHANGE_FD(r4, 0xc01070ce, 0xffffffffffffffff) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000002c0)=0x1, 0x4) 1.633690467s ago: executing program 6 (id=366): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.613296368s ago: executing program 6 (id=367): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x29c, &(0x7f0000000880)="$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") ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x19624bc, &(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES16, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB="782d1aef923861f66384e274e6750efc1f5b2a40c38d1fe0b7b37e202239a26cc1b697bdff3b03b410e6b084175cbedf4a507722704dcba484b887ff5edeec5590cda4439a579ea8a8ac47d499deae4a90fadf79b0cdcad60da10d5eb7b0fa239b61bb90459c48ea1f6e48de338f26180f6d3b94a3114c4bef6305a374893d3cad59a108ca42477dbeeca83743378df883d3dbb20d141835ed40bbd0becedc45dc6dcb", @ANYRES32=r1, @ANYRESHEX=r1], 0x0, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000c00)={'#! ', './file1/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x10, r2, 0x7a386000) ftruncate(r2, 0x5) 1.551635991s ago: executing program 0 (id=368): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x17ff, 0x9f78, 0x101, 0xec}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aed000000000000000000070000000900010073797a30000000005c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f7461000000100002800c000140000000000000"], 0xa4}}, 0x0) 1.329188082s ago: executing program 6 (id=369): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0xa, 0x0, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004380)=@newqdisc={0x10c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xdc, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0xa0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x30, 0x1, {0x1000, 0x3ff, 0x1, 0x6, 0xca}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8020, 0xfe, 0x9, 0xffffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0xf6af, 0x1ff, 0x2, 0x10}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xc2, 0xcd8, 0x7d1, 0xdc}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0x0, 0x6, 0x88, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0xfffffff7, 0x924, 0x101, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80000001, 0x5, 0x1, 0x79}}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x2000000}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x10c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r2, 0x4, 0x3, 0x6, 0x80000000, 0x8, @mcast1, @private0, 0x0, 0x7800, 0x4, 0x4}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@gettfilter={0x4c, 0x2e, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3, 0xd}, {0x7, 0x2}, {0x6, 0xfffe}}, [{0x8, 0xb, 0xe10}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xcb49}]}, 0x4c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) (async) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f00000001c0)=@in={0x2, 0x4e31, @empty}, 0x80, 0x0, 0x0, 0x0, 0x21}, 0xe07e872420dfefca) 1.128172613s ago: executing program 3 (id=370): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r0) (async) unshare(0x20040600) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4104, 0x1008}], 0x1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.127456142s ago: executing program 3 (id=371): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x28}}}, 0x24) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002e4016bd34395bd2834457f0000010000"], 0x14) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x0, 0x0, 0x210, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xba7d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x9, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x2, 0x1, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x1, 0x0, 0x6, 0x2, 0x7, 0x1], 0x0, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1c, "f30053790051bf3ffd3f72b279e4368029840d3facd44179be46d350310b"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 1.111554264s ago: executing program 3 (id=372): r0 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x22042, 0xfc) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000140)={0xfff7, 0xb79, 0xacb, 0xd6b0, 0xe, "c8cd1612469d83a4"}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x7, 0x0, 0xffffffffffffffff}, {0x4, 0x1, 0xffff}], 0x2, 0xbff, 0x1e, 0x0, 0x2c, 0x6a}) 1.003319229s ago: executing program 6 (id=373): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 955.120322ms ago: executing program 6 (id=374): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x29, 0x3}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r3 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x101, 0x1, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, r2, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) timer_create(0x3, 0x0, &(0x7f0000000100)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, &(0x7f00000000c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000200)=""/259, 0x103}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f000000db40)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 803.473529ms ago: executing program 4 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f640d967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c8348100"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)={0x120, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x120}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc, &(0x7f00000007c0)=""/12, 0x40f00, 0xc}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x7b35477d0633fa59) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}, @generic={0x4, 0x4, "00f8"}]}}}}}}}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r8, 0x0, 0x40000000) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r9 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) syz_io_uring_setup(0x4b73, &(0x7f0000000000)={0x0, 0x3e1d, 0x4, 0x2, 0x23d}, &(0x7f0000000080), &(0x7f00000001c0)) ftruncate(r9, 0x2007ffc) 686.300885ms ago: executing program 0 (id=376): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="3299", 0x2}], 0x1, 0x1) (async) setreuid(0xee01, 0xee01) (async) close(r1) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) (async) sendto$unix(r2, &(0x7f0000000340)="2c64c3d694", 0x5, 0xd1, 0x0, 0x0) (async, rerun: 64) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f9, &(0x7f0000000000)={'veth1_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 0s ago: executing program 3 (id=377): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0198060000000000200012800800018d982c8ba74f47c8b20ddfd73bdc351800677265001400028008000700ac14142c05000800fe000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0xfffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x23, 0x82, 0x0, 0xd00d2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x9302, 0xffffffffffffffff, 0x3, 0x0, 0x40, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a000000da6200000000000001f7f8b2dfbf4cc09b6a4666cdf6483dcff07afb322b9000904561d9e8a0729a40bf06907b738abb414e0e5d15441c809927a19da8bf78b50e3319a475a0f27c2ebf9512e7d588a1cfb6e64a3be01297b1252bcbdd0d4ff4f47f0ea03f662bc67c2c19f3a0b2c7cafe2514c6266a9479af4be5ec9ac80b7fa49d04bb631cd945ba93624c", @ANYRES32, @ANYRES64], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a000000da6200000000000001f7f8b2dfbf4cc09b6a4666cdf6483dcff07afb322b9000904561d9e8a0729a40bf06907b738abb414e0e5d15441c809927a19da8bf78b50e3319a475a0f27c2ebf9512e7d588a1cfb6e64a3be01297b1252bcbdd0d4ff4f47f0ea03f662bc67c2c19f3a0b2c7cafe2514c6266a9479af4be5ec9ac80b7fa49d04bb631cd945ba93624c", @ANYRES32, @ANYRES64], 0x20) r6 = open(0x0, 0x1607c0, 0x78e22799f4a46ffe) fcntl$setlease(r6, 0x400, 0x0) fcntl$setownex(r6, 0xf, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x669e34c930444153, 0x0, 0x205}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="220000000020000051808bf47786d9bacf853395e1d92df4505f5497628d2da99c3b96c4c997685c1165f534d1fd0b5b6d5556944d2270d4f73aa7e3ccb7e886c149755ba644aec6988853f01c77ba2edecd1168c97a77d33d0fbe6ab8d11469166a02f4bb330513f0ad0783d4b860b15f385dca94f6424797e3dc8de130ceac0a57de376a179d0d95427247b1be3bdf4588ac25d07bbe1cca21387b9c64d1b963bb972eba1fc409d90a939fffbf87", @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100fc000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)="a2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="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", 0x5e1}], 0x1, &(0x7f0000004200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc7}}], 0x18}}], 0x3, 0x40000) (async) sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)="a2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="5f97b46d7adb8b68ff35da0f147fef1c6c6c60db5c1fb54496a27c9eeb14cf97ceed1ac5e9d95d093d6400f4996e3c5f73fa7edad49015f697bdc1a17f731cd7b4e404954a2fbc069f73e9fa86cab27babb16a9004571326e20d84cb662973ba616c4ba4126e45ad1a7230b6c86c600a3dd01872c0f5823fadc0eb8b73f3d98c63881cd2131d63411f51e40a122182507d2d4be44f5fdec44f415e3448ebda832a6831bbd48324e11fe96400d92fae40f4a9ed9f376c56e6c6c703fe76dac9c3b4aed05a81b2b2adadc3e2ba8fd5cfc361420e61014782eeb5a921fd042bdc9cbfff5dac3df5711d5710e1d0a11d6e637dddd79ccd700dbc4924e22f8a50f0f43b6082b706c748e6d552178aa8d5959d8a3a175bf1d2b61b363fbad94b53505fb7ac302a0dec14a19141120d958b484f6e5e6f087267680eecfc91d11295a6bbd062cb7c99299681481a9ee65f157852aa46b21936e52611dbd9a8019b7566ec79b5fe8db94259c20842af9384aaf33dfafd15bb97d051743f467399caa4ee74394664c3de94449b4597bb90787c75a468f320be5e8faa11d13b589231eca2f9f4072cd44f0a1cbc874233a71901f5e027fc301caeadbe77f76206257f006e483b6b78b9319b57399a0f736f01df368726ee362c6224aaef36cff42bf221a2e03fb153bcdc240b594b22a043adc163f9004ed1ef0f152f0d960a58a18d709236df500abd672436b916c67c7e6fe7508530fe05b040c7cbeb2645f43259f3a142583a3051ea146281b901f732ba819f84050007c5f07e3848ddb7de602171525c7df8427475137a845796f12214b69dc7fb8cd458e9f2fac518b9dc84da1a13d8e95eb32cf4c14d2647b6e8bd808a91d258da905bac6e87ef6485e19ba85442c12b15c2fe95f5da8fd93f3b0c080703626eb7213954f38bdb5806393b0394532a886d896bed1b964984ba35de5de4674eab5e97312b6331fec90b0e9ad08cbb564d73a0428af45ad9ea2719cf92df0aab1853dd38afb3db05f9869be763db6b990f43c04a4ac665ca401bda074d7571200e8a96a21cbae95a9baa57e82e88458d623209a67334f64ef7fa0a32d13cb086dfccef412abe0afc8019c5f25939aa053301588663f27479ae0900830729b70385679b32996d02182adafefb5e961e5f8362ad44bb619b9059bf877f7e8fd5cf39549410e482d0c3a83ac67b7304aad8277d43da1f31d8d017304384596fb79d1201baa4feabdd8365028f3410d1e9497f88049e47c110193176927726f0a3b0209a1d3566fd04c68b6a114ea2aec2d3c43a34ba63eb75d3f6f7ed98517be6fd703b87bf50132d72222dbcd153c3d0e104a9ec507385263940799f9244c3c9b653622f3813dc689a205dc1e473815443f27d17bccdf34e219db5161364d97fd48d2f011fdaf5d7370698ad0cf3f06f66273a5fe6ad3877719dce5170e923686d89924eb85332acedb1fd208a323f84ecf2588621dd82f7a50bf489c6d28fc1d1f36a2ebbab0de2aa49a335f2a5aa09f7b5d8237757a4c74e3bca1eabbdc18f1ead5551bc59eb6f319ab16015f010c6b41f4412fc351b3be68a25b93663c389dbd72d2e84a2eb1dfe150b639d78fbb210d74352a4b8612c96845d3549b5b055ef4a864ef51c800aedd00fd7b3e8794c20a8630e9349e1825b5d7c8d25043f75be6098921eac5eb08e8dd27bc7b36453cf5c23687c809d3a74280beb3c5ce59629bb950499bffb758abe221447e78785f4cc1661c42dee6b41d95c6ac9eb76e3c3fb13b66cb058cfa728d6f11aa7b7030842169aee3a713e5cf23c760af05b3f1ac4be6c8b4ade36407dab6821fca579b6e02ad5d8adae0b9615cacdb2693ceb9d3fcf9035d5b888f12ca6dbeca13e29d014b3b5798110d822c523ab836816ca17814b7a3f3240ff62f892b34c33024ff151b7fcc5f1503a662ca5e33251a097a5810f853dba4017bcff4f18126f0ec8bddd30b391761664cc07158f6bc630fe37777376eb11bb7a5671835994dfd40fd951f7cb0a56b81063ad578f5543bd4886753d74f31619a42b9623f8002aaf189d3ca473b150842ec8bed057d4376b0266d116c867275e21a077b83ffc0e452e15b2", 0x5e1}], 0x1, &(0x7f0000004200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc7}}], 0x18}}], 0x3, 0x40000) kernel console output (not intermixed with test programs): ing VLAN 0 to HW filter on device bond0 [ 28.377317][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.403065][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.414766][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.421841][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.430885][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.437958][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.471976][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.492729][ T2127] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.499758][ T2127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.510040][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.523079][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.545421][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.552531][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.575026][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.595087][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.622559][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.671144][ T3312] veth0_vlan: entered promiscuous mode [ 28.695123][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.710529][ T3312] veth1_vlan: entered promiscuous mode [ 28.728319][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.747303][ T3312] veth0_macvtap: entered promiscuous mode [ 28.762175][ T3319] veth0_vlan: entered promiscuous mode [ 28.773785][ T3312] veth1_macvtap: entered promiscuous mode [ 28.784760][ T3317] veth0_vlan: entered promiscuous mode [ 28.792884][ T3317] veth1_vlan: entered promiscuous mode [ 28.800560][ T3319] veth1_vlan: entered promiscuous mode [ 28.823295][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.840140][ T3317] veth0_macvtap: entered promiscuous mode [ 28.849801][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.859049][ T3319] veth0_macvtap: entered promiscuous mode [ 28.871261][ T3317] veth1_macvtap: entered promiscuous mode [ 28.878642][ T3319] veth1_macvtap: entered promiscuous mode [ 28.886851][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.908823][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.917157][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.927258][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.941859][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.949086][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.970716][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.991186][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.998832][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.007643][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.016528][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.032792][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.051163][ T3318] veth0_vlan: entered promiscuous mode [ 29.065888][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.088750][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.106838][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.117227][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.140594][ T3311] veth0_vlan: entered promiscuous mode [ 29.148611][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.158934][ T3318] veth1_vlan: entered promiscuous mode [ 29.185058][ T3311] veth1_vlan: entered promiscuous mode [ 29.208545][ T3311] veth0_macvtap: entered promiscuous mode [ 29.239607][ T3318] veth0_macvtap: entered promiscuous mode [ 29.249162][ T3311] veth1_macvtap: entered promiscuous mode [ 29.259986][ T3496] loop1: detected capacity change from 0 to 512 [ 29.279519][ T3496] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.292574][ T3496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.303408][ T3318] veth1_macvtap: entered promiscuous mode [ 29.316597][ T3498] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 29.328544][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.342070][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.354992][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.378888][ T3496] EXT4-fs (loop1): 1 truncate cleaned up [ 29.385074][ T3496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.402626][ T3496] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.1.8: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 29.424320][ T3496] EXT4-fs error (device loop1) in ext4_delete_entry:2737: Corrupt filesystem [ 29.435037][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.469844][ T3506] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 29.480323][ T294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.500445][ T294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.518769][ T294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.570122][ T294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.605688][ T294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.636824][ T294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.646446][ T294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.655416][ T294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.656629][ T3515] loop3: detected capacity change from 0 to 1024 [ 29.684440][ C1] hrtimer: interrupt took 57184 ns [ 29.697496][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.699713][ T3517] Zero length message leads to an empty skb [ 29.722366][ T3517] dummy0 speed is unknown, defaulting to 1000 [ 29.729058][ T3517] dummy0 speed is unknown, defaulting to 1000 [ 29.739020][ T3517] dummy0 speed is unknown, defaulting to 1000 [ 29.750983][ T3517] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 29.762088][ T3517] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 29.771655][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.798678][ T3522] dummy0 speed is unknown, defaulting to 1000 [ 29.835694][ T3525] loop3: detected capacity change from 0 to 256 [ 29.838067][ T3517] dummy0 speed is unknown, defaulting to 1000 [ 29.842707][ T3525] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 29.848501][ T3525] FAT-fs (loop3): Directory bread(block 64) failed [ 29.869175][ T3517] dummy0 speed is unknown, defaulting to 1000 [ 29.871811][ T3525] FAT-fs (loop3): Directory bread(block 65) failed [ 29.879895][ T3517] dummy0 speed is unknown, defaulting to 1000 [ 29.893479][ T3525] FAT-fs (loop3): Directory bread(block 66) failed [ 29.900098][ T3525] FAT-fs (loop3): Directory bread(block 67) failed [ 29.902272][ T3517] dummy0 speed is unknown, defaulting to 1000 [ 29.907523][ T3525] FAT-fs (loop3): Directory bread(block 68) failed [ 29.916371][ T3517] dummy0 speed is unknown, defaulting to 1000 [ 29.919606][ T3525] FAT-fs (loop3): Directory bread(block 69) failed [ 29.933078][ T3525] FAT-fs (loop3): Directory bread(block 70) failed [ 29.939704][ T3525] FAT-fs (loop3): Directory bread(block 71) failed [ 29.946381][ T3525] FAT-fs (loop3): Directory bread(block 72) failed [ 29.953059][ T3525] FAT-fs (loop3): Directory bread(block 73) failed [ 29.959931][ T3517] syz.4.5 (3517) used greatest stack depth: 9864 bytes left [ 29.968793][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 29.968804][ T28] audit: type=1400 audit(1774306428.793:142): avc: denied { mount } for pid=3524 comm="syz.3.11" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.134043][ T28] audit: type=1400 audit(1774306428.863:143): avc: denied { create } for pid=3526 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.154290][ T28] audit: type=1400 audit(1774306428.863:144): avc: denied { getopt } for pid=3526 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.183805][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.443584][ T3538] loop1: detected capacity change from 0 to 1024 [ 30.813964][ T3540] loop4: detected capacity change from 0 to 512 [ 30.858200][ T3543] loop2: detected capacity change from 0 to 4096 [ 30.875384][ T28] audit: type=1400 audit(1774306429.213:145): avc: denied { watch } for pid=3537 comm="syz.1.13" path="/3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.896732][ T28] audit: type=1400 audit(1774306429.213:146): avc: denied { watch_reads } for pid=3537 comm="syz.1.13" path="/3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.918886][ T28] audit: type=1400 audit(1774306429.243:147): avc: denied { create } for pid=3539 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 30.938300][ T28] audit: type=1400 audit(1774306429.303:148): avc: denied { cpu } for pid=3537 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.957168][ T28] audit: type=1400 audit(1774306429.373:149): avc: denied { write } for pid=3541 comm="syz.2.15" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.133066][ T3543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.664505][ T28] audit: type=1400 audit(1774306430.473:150): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.712433][ T3540] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.729383][ T3554] netlink: 'syz.1.18': attribute type 11 has an invalid length. [ 31.739683][ T3554] loop1: detected capacity change from 0 to 512 [ 31.746473][ T3554] ======================================================= [ 31.746473][ T3554] WARNING: The mand mount option has been deprecated and [ 31.746473][ T3554] and is ignored by this kernel. Remove the mand [ 31.746473][ T3554] option from the mount to silence this warning. [ 31.746473][ T3554] ======================================================= [ 31.863724][ T3540] ------------[ cut here ]------------ [ 31.869854][ T3540] EA inode 11 i_nlink=2 [ 31.869995][ T3540] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.16/3540 [ 31.886388][ T3540] Modules linked in: [ 31.891765][ T3540] CPU: 0 UID: 0 PID: 3540 Comm: syz.4.16 Not tainted syzkaller #0 PREEMPT(full) [ 31.901713][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.912210][ T3540] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 31.918566][ T28] audit: type=1400 audit(1774306430.683:151): avc: denied { write } for pid=3547 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.918914][ T3540] Code: 54 4b 99 ff 4c 8d 2d 2d b4 5d 05 49 8d 7e 40 e8 a4 df b5 ff 49 8b 6e 40 4c 89 e7 e8 d8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 9b dd 03 66 66 66 66 66 66 2e [ 31.965026][ T3540] RSP: 0018:ffffc90001a27778 EFLAGS: 00010246 [ 31.972044][ T3540] RAX: ffff888104d11b88 RBX: ffff8881079e24a8 RCX: ffffffff81c013e8 [ 31.980244][ T3540] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc800 [ 31.988425][ T3540] RBP: 000000000000000b R08: 00018881079e245b R09: 0000000000000000 [ 31.996775][ T3540] R10: ffffc90001a276a8 R11: 0001c90001a276a8 R12: ffff8881079e2458 [ 32.005256][ T3540] R13: ffffffff871dc800 R14: ffff8881079e2410 R15: 0000000000000001 [ 32.013975][ T3540] FS: 00007fc43424f6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 32.023612][ T3540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.030933][ T3540] CR2: 0000000034747865 CR3: 000000011c230000 CR4: 00000000003506f0 [ 32.040215][ T3540] Call Trace: [ 32.044503][ T3540] [ 32.048686][ T3540] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 32.055363][ T3540] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 32.061456][ T3540] ? ext4_truncate+0x92b/0xb00 [ 32.067035][ T3540] ext4_evict_inode+0xa1f/0xd60 [ 32.073535][ T3540] ? __pfx_ext4_evict_inode+0x10/0x10 [ 32.079575][ T3540] evict+0x2af/0x510 [ 32.084065][ T3540] ? __dquot_initialize+0x146/0x7c0 [ 32.090485][ T3540] iput+0x41a/0x580 [ 32.095174][ T3540] ext4_process_orphan+0x1a9/0x1c0 [ 32.100982][ T3540] ext4_orphan_cleanup+0x6a8/0xa00 [ 32.106632][ T3540] ext4_fill_super+0x3408/0x37c0 [ 32.112180][ T3540] ? set_blocksize+0x14c/0x270 [ 32.117013][ T3540] ? setup_bdev_super+0x30e/0x370 [ 32.122442][ T3540] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.127823][ T3540] get_tree_bdev_flags+0x291/0x300 [ 32.133243][ T3540] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.138612][ T3540] get_tree_bdev+0x1f/0x30 [ 32.143156][ T3540] ext4_get_tree+0x1c/0x30 [ 32.147831][ T3540] vfs_get_tree+0x57/0x1d0 [ 32.152693][ T3540] do_new_mount+0x288/0x8d0 [ 32.157333][ T3540] path_mount+0x4d0/0xbc0 [ 32.162011][ T3540] __se_sys_mount+0x28c/0x2e0 [ 32.166880][ T3540] __x64_sys_mount+0x67/0x80 [ 32.171803][ T3540] x64_sys_call+0x2d61/0x3020 [ 32.176634][ T3540] do_syscall_64+0x12c/0x370 [ 32.181315][ T3540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.187615][ T3540] RIP: 0033:0x7fc4357fda0a [ 32.192921][ T3540] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.212968][ T3540] RSP: 002b:00007fc43424ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.221713][ T3540] RAX: ffffffffffffffda RBX: 00007fc43424eee0 RCX: 00007fc4357fda0a [ 32.230045][ T3540] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fc43424eea0 [ 32.238308][ T3540] RBP: 00002000000009c0 R08: 00007fc43424eee0 R09: 0000000000800718 [ 32.246496][ T3540] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 32.254616][ T3540] R13: 00007fc43424eea0 R14: 000000000000048d R15: 0000200000000200 [ 32.262842][ T3540] [ 32.266063][ T3540] ---[ end trace 0000000000000000 ]--- [ 32.279229][ T3540] EXT4-fs (loop4): 1 orphan inode deleted [ 32.306616][ T3540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.370340][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.375041][ T3560] : port 1(veth0_to_bridge) entered blocking state [ 32.382015][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.386248][ T3560] : port 1(veth0_to_bridge) entered disabled state [ 32.402078][ T3560] veth0_to_bridge: entered allmulticast mode [ 32.408832][ T3560] veth0_to_bridge: entered promiscuous mode [ 32.492451][ T3565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 32.501330][ T3566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.595652][ T3560] : port 2(veth0_to_team) entered blocking state [ 32.618226][ T3560] : port 2(veth0_to_team) entered disabled state [ 32.643908][ T3572] loop2: detected capacity change from 0 to 1024 [ 32.651035][ T3560] veth0_to_team: entered allmulticast mode [ 32.659150][ T3572] EXT4-fs: Ignoring removed orlov option [ 32.668256][ T3560] veth0_to_team: entered promiscuous mode [ 32.676447][ C1] Illegal XDP return value 16128 on prog (id 7) dev lo, expect packet loss! [ 32.686107][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 32.746180][ T3572] EXT4-fs: Ignoring removed bh option [ 32.777397][ T3572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.271133][ T3588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.851743][ T3615] tmpfs: Bad value for 'mpol' [ 33.867465][ T3615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.967416][ T3572] syz.2.24 (3572) used greatest stack depth: 9096 bytes left [ 33.976153][ T3619] loop4: detected capacity change from 0 to 256 [ 33.984601][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.995222][ T3619] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.020346][ T3618] dummy0 speed is unknown, defaulting to 1000 [ 34.043023][ T3619] FAT-fs (loop4): Directory bread(block 64) failed [ 34.059525][ T3619] FAT-fs (loop4): Directory bread(block 65) failed [ 34.077568][ T3619] FAT-fs (loop4): Directory bread(block 66) failed [ 34.086362][ T3619] FAT-fs (loop4): Directory bread(block 67) failed [ 34.132678][ T3619] FAT-fs (loop4): Directory bread(block 68) failed [ 34.165847][ T3637] loop3: detected capacity change from 0 to 512 [ 34.172742][ T3619] FAT-fs (loop4): Directory bread(block 69) failed [ 34.193797][ T3637] /dev/loop3: Can't open blockdev [ 34.199145][ T3619] FAT-fs (loop4): Directory bread(block 70) failed [ 34.229720][ T3639] FAT-fs (loop0): Directory bread(block 64) failed [ 34.253569][ T3639] FAT-fs (loop0): Directory bread(block 65) failed [ 34.260688][ T3645] 9p: Bad value for 'rfdno' [ 34.270701][ T3619] FAT-fs (loop4): Directory bread(block 71) failed [ 34.341559][ T3639] FAT-fs (loop0): Directory bread(block 66) failed [ 34.348140][ T3639] FAT-fs (loop0): Directory bread(block 67) failed [ 34.365130][ T3619] FAT-fs (loop4): Directory bread(block 72) failed [ 34.391460][ T3639] FAT-fs (loop0): Directory bread(block 68) failed [ 34.398103][ T3639] FAT-fs (loop0): Directory bread(block 69) failed [ 34.405311][ T3639] FAT-fs (loop0): Directory bread(block 70) failed [ 34.411685][ T3619] FAT-fs (loop4): Directory bread(block 73) failed [ 34.421006][ T3639] FAT-fs (loop0): Directory bread(block 71) failed [ 34.431073][ T3639] FAT-fs (loop0): Directory bread(block 72) failed [ 34.442033][ T3639] FAT-fs (loop0): Directory bread(block 73) failed [ 34.498191][ T3649] set_capacity_and_notify: 1 callbacks suppressed [ 34.498206][ T3649] loop2: detected capacity change from 0 to 1024 [ 34.521252][ T3649] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.541265][ T3649] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.42: Invalid block bitmap block 0 in block_group 0 [ 34.554556][ T3649] loop2: lost filesystem error report for type 5 error -117 [ 34.555855][ T3649] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.42: Failed to acquire dquot type 0 [ 34.563229][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 34.563249][ C0] EXT4-fs (loop2): initial error at time 1774306433: ext4_read_block_bitmap_nowait:483 [ 34.563271][ C0] EXT4-fs (loop2): last error at time 1774306433: ext4_read_block_bitmap_nowait:483 [ 34.600145][ T3649] loop2: lost filesystem error report for type 5 error -117 [ 34.600949][ T3649] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.42: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.621473][ T3649] loop2: lost filesystem error report for type 5 error -117 [ 34.623453][ T3649] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.42: Invalid inode bitmap blk 0 in block_group 0 [ 34.643233][ T3649] loop2: lost filesystem error report for type 5 error -117 [ 34.643608][ T3649] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 34.659432][ T3649] loop2: lost filesystem error report for type 5 error -117 [ 34.659644][ T40] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 34.678942][ T3649] EXT4-fs (loop2): 1 orphan inode deleted [ 34.685494][ T3649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.441494][ T28] kauditd_printk_skb: 155 callbacks suppressed [ 35.441517][ T28] audit: type=1400 audit(1774306434.233:304): avc: denied { bind } for pid=3638 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.431061][ T3657] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.797407][ T28] audit: type=1400 audit(1774306434.233:305): avc: denied { shutdown } for pid=3638 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.896924][ T28] audit: type=1400 audit(1774306434.233:306): avc: denied { connect } for pid=3638 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.981969][ T3647] loop1: detected capacity change from 0 to 1024 [ 36.992850][ T3669] loop3: detected capacity change from 0 to 512 [ 37.033127][ T28] audit: type=1400 audit(1774306434.233:307): avc: denied { name_connect } for pid=3638 comm="syz.0.41" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 37.080186][ T3669] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 37.118410][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.133502][ T3669] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 37.179588][ T3672] loop0: detected capacity change from 0 to 4096 [ 37.186554][ T3669] EXT4-fs (loop3): 1 truncate cleaned up [ 37.196142][ T28] audit: type=1400 audit(1774306435.613:308): avc: denied { getopt } for pid=3656 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.222936][ T3676] bridge1: entered allmulticast mode [ 37.232000][ T3669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.255001][ T3672] EXT4-fs: inline encryption not supported [ 37.268957][ T3647] raw_sendmsg: syz.1.43 forgot to set AF_INET. Fix it! [ 37.311722][ T3672] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 37.324001][ T28] audit: type=1400 audit(1774306435.673:309): avc: denied { getattr } for pid=3658 comm="syz.0.46" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.361545][ T3672] System zones: 0-5 [ 37.369782][ T28] audit: type=1400 audit(1774306435.703:310): avc: denied { bind } for pid=3659 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.393363][ T3672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.409809][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.418963][ T28] audit: type=1400 audit(1774306435.703:311): avc: denied { setopt } for pid=3659 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.452694][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.515405][ T28] audit: type=1400 audit(1774306436.083:312): avc: denied { write } for pid=3646 comm="syz.1.43" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.544448][ T3685] loop1: detected capacity change from 0 to 512 [ 37.555257][ T3686] loop2: detected capacity change from 0 to 1024 [ 37.575848][ T28] audit: type=1400 audit(1774306436.283:313): avc: denied { setopt } for pid=3679 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.583625][ T3686] EXT4-fs: Ignoring removed orlov option [ 37.618318][ T3685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.679090][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.700447][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.717865][ T3685] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.732441][ T3686] EXT4-fs: Ignoring removed bh option [ 37.754850][ T3691] loop0: detected capacity change from 0 to 512 [ 37.788650][ T3691] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.803058][ T3685] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.52: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 37.817847][ T3686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.820430][ T3691] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.54: invalid indirect mapped block 83886080 (level 1) [ 37.858829][ T3685] EXT4-fs error (device loop1) in ext4_free_inode:361: Filesystem failed CRC [ 37.881499][ T3691] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.884386][ T3691] EXT4-fs (loop0): Remounting filesystem read-only [ 37.893547][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 37.893573][ C1] EXT4-fs (loop0): initial error at time 1774306436: ext4_free_branches:1023: inode 16 [ 37.893601][ C1] EXT4-fs (loop0): last error at time 1774306436: ext4_free_branches:1023: inode 16 [ 37.934474][ T3691] EXT4-fs (loop0): 1 orphan inode deleted [ 37.950744][ T3691] EXT4-fs (loop0): 1 truncate cleaned up [ 37.976385][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.995369][ T3691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.082160][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.113361][ T3704] tipc: Started in network mode [ 38.118295][ T3704] tipc: Node identity a228844c8c27, cluster identity 4711 [ 38.125583][ T3704] tipc: Enabled bearer , priority 0 [ 38.134914][ T3704] syzkaller0: entered promiscuous mode [ 38.161457][ T3704] syzkaller0: entered allmulticast mode [ 38.201750][ T3702] tipc: Resetting bearer [ 38.223684][ T3702] tipc: Disabling bearer [ 38.319055][ T3714] netlink: 'syz.1.62': attribute type 21 has an invalid length. [ 38.337137][ T3714] netlink: 128 bytes leftover after parsing attributes in process `syz.1.62'. [ 38.433892][ T3714] netlink: 'syz.1.62': attribute type 4 has an invalid length. [ 38.450804][ T3701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.491472][ T3714] netlink: 'syz.1.62': attribute type 5 has an invalid length. [ 38.530141][ T3714] netlink: 3 bytes leftover after parsing attributes in process `syz.1.62'. [ 38.639395][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.650484][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 38.672229][ T3721] hsr0: entered promiscuous mode [ 38.679404][ T3726] hsr_slave_0: left promiscuous mode [ 38.715180][ T3726] hsr_slave_1: left promiscuous mode [ 38.750707][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.850016][ T3722] dummy0 speed is unknown, defaulting to 1000 [ 38.930959][ T3722] chnl_net:caif_netlink_parms(): no params data found [ 38.954179][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.065788][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.084725][ T3745] sg_read: process 52 (syz.0.68) changed security contexts after opening file descriptor, this is not allowed. [ 39.154073][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.161258][ T3722] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.181651][ T3722] bridge_slave_0: entered allmulticast mode [ 39.188060][ T3722] bridge_slave_0: entered promiscuous mode [ 39.241077][ T3750] dummy0 speed is unknown, defaulting to 1000 [ 39.248464][ T3722] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.267571][ T3722] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.290674][ T3722] bridge_slave_1: entered allmulticast mode [ 39.310461][ T3722] bridge_slave_1: entered promiscuous mode [ 39.399749][ T3722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.410405][ T3722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.430770][ T3722] team0: Port device team_slave_0 added [ 39.437387][ T3722] team0: Port device team_slave_1 added [ 39.443447][ T50] bridge_slave_1: left allmulticast mode [ 39.449161][ T50] bridge_slave_1: left promiscuous mode [ 39.467556][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.489498][ T50] bridge_slave_0: left allmulticast mode [ 39.497469][ T50] bridge_slave_0: left promiscuous mode [ 39.506529][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.645487][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.673672][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.692215][ T50] bond0 (unregistering): Released all slaves [ 39.740456][ T3722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.754114][ T3722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.794908][ T3772] loop3: detected capacity change from 0 to 512 [ 39.801198][ T3722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.812963][ T3722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.820009][ T3722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.851541][ T3722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.881315][ T3772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.894811][ T3772] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.862318][ T3778] netlink: 'syz.0.72': attribute type 11 has an invalid length. [ 40.877319][ T3778] loop0: detected capacity change from 0 to 512 [ 40.967698][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.995398][ T50] hsr_slave_0: left promiscuous mode [ 41.024986][ T50] hsr_slave_1: left promiscuous mode [ 41.030784][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.038494][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.046354][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.054009][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.079291][ T50] veth1_macvtap: left promiscuous mode [ 41.085848][ T50] veth0_macvtap: left promiscuous mode [ 41.091587][ T50] veth1_vlan: left promiscuous mode [ 41.096808][ T50] veth0_vlan: left promiscuous mode [ 41.196803][ T3797] loop0: detected capacity change from 0 to 512 [ 41.258104][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 41.258118][ T28] audit: type=1400 audit(1774306440.073:337): avc: denied { write } for pid=3798 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.261991][ T50] team0 (unregistering): Port device team_slave_1 removed [ 41.314499][ T50] team0 (unregistering): Port device team_slave_0 removed [ 41.380019][ T3799] syz.0.77 (3799) used greatest stack depth: 9072 bytes left [ 41.388681][ T3722] hsr_slave_0: entered promiscuous mode [ 41.396854][ T3802] loop3: detected capacity change from 0 to 256 [ 41.412046][ T3722] hsr_slave_1: entered promiscuous mode [ 41.418926][ T3802] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.485762][ T3802] FAT-fs (loop3): Directory bread(block 64) failed [ 41.498505][ T3804] loop0: detected capacity change from 0 to 4096 [ 41.515129][ T3802] FAT-fs (loop3): Directory bread(block 65) failed [ 41.524674][ T28] audit: type=1400 audit(1774306440.343:338): avc: denied { read } for pid=3807 comm="syz.4.80" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.551496][ T3802] FAT-fs (loop3): Directory bread(block 66) failed [ 41.558012][ T3802] FAT-fs (loop3): Directory bread(block 67) failed [ 41.575863][ T28] audit: type=1400 audit(1774306440.383:339): avc: denied { open } for pid=3807 comm="syz.4.80" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.610228][ T3802] FAT-fs (loop3): Directory bread(block 68) failed [ 41.625075][ T3802] FAT-fs (loop3): Directory bread(block 69) failed [ 41.639424][ T3802] FAT-fs (loop3): Directory bread(block 70) failed [ 41.646787][ T3722] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.649503][ T3802] FAT-fs (loop3): Directory bread(block 71) failed [ 41.660593][ T3802] FAT-fs (loop3): Directory bread(block 72) failed [ 41.668609][ T3802] FAT-fs (loop3): Directory bread(block 73) failed [ 41.677983][ T3722] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.686138][ T3804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.697838][ T28] audit: type=1400 audit(1774306440.503:340): avc: denied { shutdown } for pid=3822 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.722837][ T3722] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.734271][ T3722] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.841612][ T28] audit: type=1400 audit(1774306440.503:341): avc: denied { mounton } for pid=3822 comm="syz.1.82" path="/15/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.873709][ T28] audit: type=1400 audit(1774306440.503:342): avc: denied { read } for pid=1507 comm="kworker/0:2" path="socket:[5677]" dev="sockfs" ino=5677 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 42.040560][ T3722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.755357][ T3851] netlink: 'syz.4.84': attribute type 11 has an invalid length. [ 42.765417][ T3851] loop4: detected capacity change from 0 to 512 [ 42.829937][ T3722] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.848658][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.855735][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.889691][ T3856] netlink: 'syz.1.85': attribute type 2 has an invalid length. [ 42.900949][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.908046][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.915965][ T28] audit: type=1400 audit(1774306441.733:343): avc: denied { create } for pid=3855 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 43.072502][ C0] vcan0: j1939_tp_rxtimer: 0xffff888103eff400: rx timeout, send abort [ 43.072548][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888103eff400: 0x1ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 43.115387][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.197083][ T28] audit: type=1400 audit(1774306441.933:344): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.247328][ T28] audit: type=1400 audit(1774306441.933:345): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.335242][ T28] audit: type=1400 audit(1774306441.933:346): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.477465][ T3878] loop4: detected capacity change from 0 to 512 [ 43.513809][ T3878] EXT4-fs: Ignoring removed nobh option [ 43.544217][ T3883] loop1: detected capacity change from 0 to 512 [ 43.550534][ T3878] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.583219][ T3878] EXT4-fs (loop4): 1 truncate cleaned up [ 43.589245][ T3878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.656059][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 43.685353][ T3722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.723957][ T3722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.777662][ T3906] loop1: detected capacity change from 0 to 512 [ 43.787573][ T3878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.822098][ T3878] bond1: (slave ip6gretap1): making interface the new active one [ 43.831094][ T3878] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 43.848064][ T3906] ./file0: Can't lookup blockdev [ 43.870698][ T3906] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 43.895420][ T3906] team0: Device wg1 is of different type [ 43.899366][ T3878] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.90: bad entry in directory: directory entry overrun - offset=44, inode=12, rec_len=1024, size=1024 fake=0 [ 44.019224][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.022081][ T3722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.194741][ T3943] netlink: 'syz.0.95': attribute type 11 has an invalid length. [ 44.208031][ T3943] loop0: detected capacity change from 0 to 512 [ 44.393370][ T3939] vfat: Unknown parameter '.' [ 44.516437][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 44.640750][ T3722] veth0_vlan: entered promiscuous mode [ 44.649504][ T3722] veth1_vlan: entered promiscuous mode [ 44.669677][ T3722] veth0_macvtap: entered promiscuous mode [ 44.682287][ T3722] veth1_macvtap: entered promiscuous mode [ 44.691167][ T3967] vfat: Unknown parameter '' [ 44.707152][ T3722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.720285][ T3967] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 44.744253][ T3722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.756628][ T3967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.784630][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.792525][ T3967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 44.795309][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.810989][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.825900][ T3967] bond1: (slave bridge1): making interface the new active one [ 44.844736][ T3967] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 44.854678][ T3972] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 44.874904][ T3972] System zones: 0-1, 3-36 [ 44.882730][ T3975] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 44.892080][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.902460][ T3972] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.104: bad orphan inode 134217728 [ 44.916082][ T3972] loop4: lost filesystem error report for type 5 error -117 [ 44.917192][ T3972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.963656][ T3972] dummy0 speed is unknown, defaulting to 1000 [ 45.041573][ T3979] set_capacity_and_notify: 4 callbacks suppressed [ 45.041590][ T3979] loop0: detected capacity change from 0 to 8192 [ 45.096488][ T3979] loop0: p1 < > p2 p4 < p5 > [ 45.101197][ T3979] loop0: partition table partially beyond EOD, truncated [ 45.108365][ T3979] loop0: p1 start 134217728 is beyond EOD, truncated [ 45.115066][ T3979] loop0: p2 size 591360 extends beyond EOD, truncated [ 45.123247][ T3979] loop0: p5 size 591360 extends beyond EOD, truncated [ 45.227142][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 45.238621][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 45.256289][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 45.406842][ T3989] ALSA: seq fatal error: cannot create timer (-19) [ 45.853215][ T3999] loop0: detected capacity change from 0 to 512 [ 45.862963][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.050342][ T3999] EXT4-fs: Ignoring removed nobh option [ 46.190564][ T3999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.224554][ T4016] ipvlan2: entered allmulticast mode [ 46.230071][ T4016] dummy0: entered allmulticast mode [ 46.309876][ T3999] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.109: iget: bad i_size value: 38620345925642 [ 46.348301][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 46.348312][ T28] audit: type=1400 audit(1774306445.163:375): avc: denied { read write } for pid=4021 comm="syz.4.113" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.401159][ T4022] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 46.406924][ T3999] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.463127][ T3999] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.109: couldn't read orphan inode 15 (err -117) [ 46.472351][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 46.472372][ C1] EXT4-fs (loop0): initial error at time 1774306445: ext4_orphan_get:1391: inode 15 [ 46.472395][ C1] EXT4-fs (loop0): last error at time 1774306445: ext4_orphan_get:1391: inode 15 [ 46.501339][ T28] audit: type=1400 audit(1774306445.203:376): avc: denied { open } for pid=4021 comm="syz.4.113" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.538260][ T3999] loop0: lost filesystem error report for type 5 error -117 [ 46.546094][ T3999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.628930][ T28] audit: type=1400 audit(1774306445.443:377): avc: denied { create } for pid=3998 comm="syz.0.109" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.618091][ T3999] dummy0 speed is unknown, defaulting to 1000 [ 47.645460][ T4042] netlink: 72 bytes leftover after parsing attributes in process `syz.1.116'. [ 47.819427][ T4044] tmpfs: Bad value for 'size' [ 47.845794][ T4031] netlink: 'syz.4.114': attribute type 11 has an invalid length. [ 47.855589][ T4031] loop4: detected capacity change from 0 to 512 [ 47.876267][ T4040] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.109: invalid indirect mapped block 3973251072 (level 0) [ 47.937346][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.075485][ T28] audit: type=1400 audit(1774306446.893:378): avc: denied { ioctl } for pid=4061 comm="syz.4.122" path="socket:[6142]" dev="sockfs" ino=6142 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.121942][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 48.130873][ T4065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4065 comm=syz.1.123 [ 48.651709][ T4073] loop5: detected capacity change from 0 to 512 [ 48.702621][ T4073] EXT4-fs: Ignoring removed oldalloc option [ 48.795784][ T4073] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.126: invalid block [ 48.873196][ T4073] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.874154][ T4073] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.126: invalid indirect mapped block 4294967295 (level 1) [ 48.883931][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 48.883951][ C0] EXT4-fs (loop5): initial error at time 1774306447: ext4_get_branch:178: inode 11: block 4294967295 [ 48.883989][ C0] EXT4-fs (loop5): last error at time 1774306447: ext4_get_branch:178: inode 11: block 4294967295 [ 49.024313][ T4080] process 'syz.1.128' launched '/dev/fd/6' with NULL argv: empty string added [ 49.047071][ T28] audit: type=1400 audit(1774306447.843:379): avc: denied { execute } for pid=4079 comm="syz.1.128" dev="hugetlbfs" ino=7211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 49.153360][ T28] audit: type=1400 audit(1774306447.903:380): avc: denied { execute_no_trans } for pid=4079 comm="syz.1.128" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=7211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 49.199048][ T4096] loop3: detected capacity change from 0 to 128 [ 49.215076][ T4073] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.215205][ T4073] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.126: invalid indirect mapped block 4294967295 (level 1) [ 49.239713][ T4094] siw: device registration error -23 [ 49.249220][ T4096] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.303814][ T4096] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.321448][ T28] audit: type=1400 audit(1774306448.003:381): avc: denied { create } for pid=4093 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.350939][ T4073] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.351533][ T4073] EXT4-fs (loop5): 2 truncates cleaned up [ 49.419366][ T4073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.433423][ T28] audit: type=1400 audit(1774306448.033:382): avc: denied { setopt } for pid=4093 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.457419][ T4094] dummy0 speed is unknown, defaulting to 1000 [ 49.472350][ T30] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.496062][ T4073] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.126: path /4/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 49.546094][ T4073] forcing mempool usage for fserror_report+0x1b4/0x500 [ 49.922576][ T4108] netlink: 'syz.3.133': attribute type 11 has an invalid length. [ 49.937071][ T4108] loop3: detected capacity change from 0 to 512 [ 49.984463][ T3722] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.347067][ T4121] vti0: entered allmulticast mode [ 50.355401][ T4120] loop4: detected capacity change from 0 to 256 [ 50.377970][ T4120] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.413716][ T4126] loop1: detected capacity change from 0 to 512 [ 50.422522][ T4126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.430322][ T4126] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.139: iget: bad extended attribute block 3153 [ 50.443095][ T4126] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.443253][ T4126] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.139: couldn't read orphan inode 11 (err -117) [ 50.452453][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 50.452474][ C0] EXT4-fs (loop1): initial error at time 1774306449: ext4_orphan_get:1391: inode 11 [ 50.452500][ C0] EXT4-fs (loop1): last error at time 1774306449: ext4_orphan_get:1391: inode 11 [ 50.491279][ T4126] loop1: lost filesystem error report for type 5 error -117 [ 50.545125][ T4126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.576459][ T4120] FAT-fs (loop4): Directory bread(block 64) failed [ 50.584909][ T4120] FAT-fs (loop4): Directory bread(block 65) failed [ 50.592515][ T4120] FAT-fs (loop4): Directory bread(block 66) failed [ 50.592990][ T4134] syzkaller0: entered promiscuous mode [ 50.599093][ T4120] FAT-fs (loop4): Directory bread(block 67) failed [ 50.612151][ T4120] FAT-fs (loop4): Directory bread(block 68) failed [ 50.618649][ T4120] FAT-fs (loop4): Directory bread(block 69) failed [ 50.625531][ T4120] FAT-fs (loop4): Directory bread(block 70) failed [ 50.632849][ T4120] FAT-fs (loop4): Directory bread(block 71) failed [ 50.637279][ T4134] syzkaller0: entered allmulticast mode [ 50.639510][ T4120] FAT-fs (loop4): Directory bread(block 72) failed [ 50.651641][ T4120] FAT-fs (loop4): Directory bread(block 73) failed [ 50.682398][ T28] audit: type=1400 audit(1774306449.503:383): avc: denied { create } for pid=4135 comm="syz.5.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.861483][ T28] audit: type=1400 audit(1774306449.533:384): avc: denied { read } for pid=4135 comm="syz.5.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.133234][ T4148] loop3: detected capacity change from 0 to 512 [ 51.352714][ T4148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.396225][ T4148] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.832231][ T28] audit: type=1400 audit(1774306449.633:385): avc: denied { bind } for pid=4135 comm="syz.5.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.851420][ T28] audit: type=1400 audit(1774306449.633:386): avc: denied { write } for pid=4135 comm="syz.5.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.862856][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.870597][ T28] audit: type=1400 audit(1774306449.663:387): avc: denied { connect } for pid=4125 comm="syz.1.139" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.977711][ T4126] syz.1.139 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 51.992272][ T4126] CPU: 1 UID: 0 PID: 4126 Comm: syz.1.139 Tainted: G W syzkaller #0 PREEMPT(full) [ 51.992302][ T4126] Tainted: [W]=WARN [ 51.992309][ T4126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.992320][ T4126] Call Trace: [ 51.992328][ T4126] [ 51.992335][ T4126] __dump_stack+0x1d/0x30 [ 51.992417][ T4126] dump_stack_lvl+0x95/0xd0 [ 51.992461][ T4126] dump_stack+0x15/0x1b [ 51.992501][ T4126] dump_header+0x80/0x240 [ 51.992574][ T4126] oom_kill_process+0x295/0x350 [ 51.992591][ T4126] out_of_memory+0x97d/0xb80 [ 51.992612][ T4126] try_charge_memcg+0x62e/0xa10 [ 51.992645][ T4126] obj_cgroup_charge_pages+0x23/0xc0 [ 51.992716][ T4126] __memcg_kmem_charge_page+0x9e/0x170 [ 51.992786][ T4126] __alloc_frozen_pages_noprof+0x18a/0x360 [ 51.992813][ T4126] alloc_pages_mpol+0xb3/0x260 [ 51.992914][ T4126] alloc_pages_noprof+0x8f/0x130 [ 51.992938][ T4126] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 51.992964][ T4126] __kvmalloc_node_noprof+0x3d4/0x650 [ 51.993013][ T4126] ? futex_hash_allocate+0x190/0x9d0 [ 51.993038][ T4126] ? futex_hash_allocate+0x190/0x9d0 [ 51.993063][ T4126] futex_hash_allocate+0x190/0x9d0 [ 51.993086][ T4126] ? cap_task_prctl+0x13f/0x6e0 [ 51.993115][ T4126] futex_hash_prctl+0xd8/0xf0 [ 51.993146][ T4126] __se_sys_prctl+0xa3d/0x13f0 [ 51.993174][ T4126] __x64_sys_prctl+0x67/0x80 [ 51.993252][ T4126] x64_sys_call+0x2533/0x3020 [ 51.993275][ T4126] do_syscall_64+0x12c/0x370 [ 51.993345][ T4126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.993362][ T4126] RIP: 0033:0x7f956c7cc799 [ 51.993378][ T4126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.993395][ T4126] RSP: 002b:00007f956b227028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 51.993411][ T4126] RAX: ffffffffffffffda RBX: 00007f956ca45fa0 RCX: 00007f956c7cc799 [ 51.993422][ T4126] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 51.993465][ T4126] RBP: 00007f956c862c99 R08: 0000000000000000 R09: 0000000000000000 [ 51.993476][ T4126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.993485][ T4126] R13: 00007f956ca46038 R14: 00007f956ca45fa0 R15: 00007ffe4e6b8698 [ 51.993500][ T4126] [ 51.998421][ T4126] memory: usage 307200kB, limit 307200kB, failcnt 208 [ 52.239776][ T4126] memory+swap: usage 307804kB, limit 9007199254740988kB, failcnt 0 [ 52.248588][ T4126] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 52.255943][ T4126] Memory cgroup stats for /syz1: [ 52.256295][ T4126] cache 4096 [ 52.267114][ T4126] rss 4096 [ 52.270249][ T4126] shmem 0 [ 52.274040][ T4126] mapped_file 0 [ 52.277551][ T4126] dirty 0 [ 52.280497][ T4126] writeback 0 [ 52.283912][ T4126] workingset_refault_anon 7 [ 52.288478][ T4126] workingset_refault_file 387 [ 52.293284][ T4126] swap 626688 [ 52.296552][ T4126] swapcached 630784 [ 52.300455][ T4126] pgpgin 44789 [ 52.304560][ T4126] pgpgout 44787 [ 52.308006][ T4126] pgfault 28316 [ 52.311617][ T4126] pgmajfault 10 [ 52.315086][ T4126] inactive_anon 0 [ 52.318696][ T4126] active_anon 0 [ 52.322438][ T4126] inactive_file 0 [ 52.323213][ T28] audit: type=1400 audit(1774306450.243:388): avc: denied { write open } for pid=4147 comm="syz.3.144" path="/31/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.346707][ T4126] active_file 4096 [ 52.361515][ T4126] unevictable 0 [ 52.364982][ T4126] hierarchical_memory_limit 314572800 [ 52.370374][ T4126] hierarchical_memsw_limit 9223372036854771712 [ 52.376908][ T4126] total_cache 4096 [ 52.380623][ T4126] total_rss 4096 [ 52.380802][ T4155] loop3: detected capacity change from 0 to 1024 [ 52.384270][ T4126] total_shmem 0 [ 52.384279][ T4126] total_mapped_file 0 [ 52.384286][ T4126] total_dirty 0 [ 52.384293][ T4126] total_writeback 0 [ 52.384299][ T4126] total_workingset_refault_anon 7 [ 52.384306][ T4126] total_workingset_refault_file 387 [ 52.384313][ T4126] total_swap 626688 [ 52.384320][ T4126] total_swapcached 630784 [ 52.384326][ T4126] total_pgpgin 44789 [ 52.384377][ T4126] total_pgpgout 44787 [ 52.384384][ T4126] total_pgfault 28316 [ 52.384392][ T4126] total_pgmajfault 10 [ 52.384399][ T4126] total_inactive_anon 0 [ 52.384407][ T4126] total_active_anon 0 [ 52.384414][ T4126] total_inactive_file 0 [ 52.384420][ T4126] total_active_file 4096 [ 52.384429][ T4126] total_unevictable 0 [ 52.384435][ T4126] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.139,pid=4125,uid=0 [ 52.384591][ T4126] Memory cgroup out of memory: Killed process 4125 (syz.1.139) total-vm:94164kB, anon-rss:1228kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 52.416150][ T4142] syz.1.139 (4142) used greatest stack depth: 8760 bytes left [ 52.459427][ T4155] EXT4-fs: inline encryption not supported [ 52.529823][ T4155] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.559940][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.578802][ T4159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4159 comm=syz.5.147 [ 52.593396][ T4155] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.145: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.618814][ T4159] netlink: 48 bytes leftover after parsing attributes in process `syz.5.147'. [ 52.627743][ T4159] netlink: 48 bytes leftover after parsing attributes in process `syz.5.147'. [ 52.637275][ T4159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4159 comm=syz.5.147 [ 52.650844][ T4155] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.651495][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.666958][ C1] EXT4-fs (loop3): initial error at time 1774306451: ext4_map_blocks:776: inode 3: block 2 [ 52.676998][ C1] EXT4-fs (loop3): last error at time 1774306451: ext4_map_blocks:776: inode 3: block 2 [ 52.686787][ T4155] EXT4-fs (loop3): Remounting filesystem read-only [ 52.703624][ T4155] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 52.736757][ T4155] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 52.761471][ T4155] EXT4-fs (loop3): 1 orphan inode deleted [ 52.767771][ T4155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.786604][ T4155] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.811453][ T28] audit: type=1400 audit(1774306451.613:389): avc: denied { name_bind } for pid=4174 comm="syz.5.152" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.833576][ T28] audit: type=1400 audit(1774306451.623:390): avc: denied { mount } for pid=4170 comm="syz.0.150" name="/" dev="ramfs" ino=7396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.856384][ T28] audit: type=1400 audit(1774306451.633:391): avc: denied { watch } for pid=4170 comm="syz.0.150" path="/" dev="ramfs" ino=7396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 52.878991][ T28] audit: type=1400 audit(1774306451.673:392): avc: denied { read } for pid=4174 comm="syz.5.152" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 52.955738][ T4180] loop1: detected capacity change from 0 to 512 [ 52.969015][ T4182] netlink: 'syz.4.151': attribute type 11 has an invalid length. [ 52.997925][ T4180] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.009763][ T4180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 53.017760][ T4180] System zones: 1-12 [ 53.022275][ T4180] EXT4-fs (loop1): 1 truncate cleaned up [ 53.029122][ T4180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.052675][ T4172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.150'. [ 53.085227][ T4155] loop3: detected capacity change from 0 to 128 [ 53.358129][ T4189] loop0: detected capacity change from 0 to 512 [ 53.493982][ T4189] EXT4-fs: Ignoring removed bh option [ 53.499494][ T4189] EXT4-fs: inline encryption not supported [ 53.506362][ T4189] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.669580][ T4189] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.687522][ T4194] loop5: detected capacity change from 0 to 1764 [ 53.754887][ T4194] iso9660: Unknown parameter 'ov퐌_erriderockperm' [ 53.774627][ T4189] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.154: bg 0: block 248: padding at end of block bitmap is not set [ 53.829659][ T4189] loop0: lost filesystem error report for type 5 error -117 [ 53.829858][ T4189] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.154: Failed to acquire dquot type 1 [ 53.837186][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 53.837204][ C0] EXT4-fs (loop0): last error at time 1774306452: ext4_validate_block_bitmap:441 [ 53.944186][ T4189] loop0: lost filesystem error report for type 5 error -117 [ 53.944593][ T4189] EXT4-fs (loop0): 1 truncate cleaned up [ 53.981055][ T4213] IPv6: sit1: Disabled Multicast RS [ 54.008823][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 54.072162][ T4189] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0008-000000000000. [ 54.846752][ T4189] dummy0 speed is unknown, defaulting to 1000 [ 55.207983][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.228546][ T4247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 55.238683][ T4248] capability: warning: `syz.4.163' uses 32-bit capabilities (legacy support in use) [ 55.258527][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 55.272976][ T4247] loop3: detected capacity change from 0 to 512 [ 55.299276][ T4247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.334278][ T4241] program syz.4.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.346439][ T4253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.360413][ T4247] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 2: comm syz.3.164: invalid block [ 55.517940][ T4260] netlink: 'syz.5.166': attribute type 11 has an invalid length. [ 55.579621][ T4253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.619284][ T4247] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.619512][ T4247] EXT4-fs (loop3): Remounting filesystem read-only [ 55.628673][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 55.628687][ C1] EXT4-fs (loop3): initial error at time 1774306454: __ext4_iget:5378: inode 11: block 2 [ 55.628713][ C1] EXT4-fs (loop3): last error at time 1774306454: __ext4_iget:5378: inode 11: block 2 [ 55.767936][ T4247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.838874][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.913728][ T4278] loop3: detected capacity change from 0 to 256 [ 55.961969][ T4278] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.996251][ T4278] FAT-fs (loop3): Directory bread(block 64) failed [ 56.011499][ T4278] FAT-fs (loop3): Directory bread(block 65) failed [ 56.045631][ T4278] FAT-fs (loop3): Directory bread(block 66) failed [ 56.067975][ T4278] FAT-fs (loop3): Directory bread(block 67) failed [ 56.102401][ T4278] FAT-fs (loop3): Directory bread(block 68) failed [ 56.131484][ T4278] FAT-fs (loop3): Directory bread(block 69) failed [ 56.164914][ T4278] FAT-fs (loop3): Directory bread(block 70) failed [ 56.172115][ T4278] FAT-fs (loop3): Directory bread(block 71) failed [ 56.178625][ T4278] FAT-fs (loop3): Directory bread(block 72) failed [ 56.185147][ T4278] FAT-fs (loop3): Directory bread(block 73) failed [ 57.020675][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 57.020688][ T28] audit: type=1400 audit(1774306455.833:414): avc: denied { bind } for pid=4293 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.466121][ T4305] loop5: detected capacity change from 0 to 32768 [ 57.551483][ T28] audit: type=1400 audit(1774306456.353:415): avc: denied { bind } for pid=4304 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.639368][ T28] audit: type=1400 audit(1774306456.433:416): avc: denied { setopt } for pid=4308 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.731164][ T28] audit: type=1400 audit(1774306456.443:417): avc: denied { create } for pid=4308 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.146387][ T28] audit: type=1326 audit(1774306456.963:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c7cc799 code=0x7ffc0000 [ 58.178889][ T28] audit: type=1326 audit(1774306456.983:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c7cc799 code=0x7ffc0000 [ 58.208015][ T4325] loop3: detected capacity change from 0 to 1024 [ 58.215515][ T28] audit: type=1326 audit(1774306456.983:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c7cc799 code=0x7ffc0000 [ 58.238859][ T28] audit: type=1326 audit(1774306456.983:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c7cc799 code=0x7ffc0000 [ 58.239666][ T4325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.262305][ T28] audit: type=1326 audit(1774306456.993:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f956c7cc799 code=0x7ffc0000 [ 58.262331][ T28] audit: type=1326 audit(1774306456.993:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c7cc799 code=0x7ffc0000 [ 58.377165][ T4335] loop1: detected capacity change from 0 to 512 [ 58.421830][ T4335] EXT4-fs: Ignoring removed oldalloc option [ 58.477275][ T4335] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.184: invalid block [ 58.492074][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.182'. [ 58.501055][ T4335] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.501327][ T4335] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.184: invalid indirect mapped block 4294967295 (level 1) [ 58.510479][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 58.510495][ C0] EXT4-fs (loop1): initial error at time 1774306457: ext4_get_branch:178: inode 11: block 4294967295 [ 58.510544][ C0] EXT4-fs (loop1): last error at time 1774306457: ext4_get_branch:178: inode 11: block 4294967295 [ 58.587081][ T4335] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.589640][ T4335] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.184: invalid indirect mapped block 4294967295 (level 1) [ 58.613789][ T4335] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.614119][ T4335] EXT4-fs (loop1): 2 truncates cleaned up [ 58.630544][ T4335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.743796][ T4335] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.184: path /38/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 58.862524][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.876390][ T4370] loop4: detected capacity change from 0 to 256 [ 58.893267][ T4370] vfat: Unknown parameter '' [ 58.977429][ T4377] FAULT_INJECTION: forcing a failure. [ 58.977429][ T4377] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.004316][ T4377] CPU: 1 UID: 0 PID: 4377 Comm: syz.1.194 Tainted: G W syzkaller #0 PREEMPT(full) [ 59.004346][ T4377] Tainted: [W]=WARN [ 59.004353][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.004364][ T4377] Call Trace: [ 59.004370][ T4377] [ 59.004377][ T4377] __dump_stack+0x1d/0x30 [ 59.004397][ T4377] dump_stack_lvl+0x95/0xd0 [ 59.004473][ T4377] dump_stack+0x15/0x1b [ 59.004490][ T4377] should_fail_ex+0x263/0x280 [ 59.004509][ T4377] should_fail+0xb/0x20 [ 59.004604][ T4377] should_fail_usercopy+0x1a/0x20 [ 59.004628][ T4377] _copy_to_user+0x20/0xa0 [ 59.004687][ T4377] simple_read_from_buffer+0xb5/0x130 [ 59.004705][ T4377] proc_fail_nth_read+0x10e/0x150 [ 59.004726][ T4377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.004807][ T4377] vfs_read+0x1ab/0x7f0 [ 59.004897][ T4377] ? __rcu_read_unlock+0x4e/0x70 [ 59.004921][ T4377] ? __fget_files+0x184/0x1c0 [ 59.004963][ T4377] ? mutex_lock+0x57/0x90 [ 59.004984][ T4377] ksys_read+0xdc/0x1a0 [ 59.004998][ T4377] __x64_sys_read+0x40/0x50 [ 59.005012][ T4377] x64_sys_call+0x2886/0x3020 [ 59.005093][ T4377] do_syscall_64+0x12c/0x370 [ 59.005113][ T4377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.005130][ T4377] RIP: 0033:0x7f956c78cfce [ 59.005145][ T4377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.005196][ T4377] RSP: 002b:00007f956b226fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.005269][ T4377] RAX: ffffffffffffffda RBX: 00007f956b2276c0 RCX: 00007f956c78cfce [ 59.005281][ T4377] RDX: 000000000000000f RSI: 00007f956b2270a0 RDI: 0000000000000006 [ 59.005358][ T4377] RBP: 00007f956b227090 R08: 0000000000000000 R09: 0000000000000000 [ 59.005371][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.005383][ T4377] R13: 00007f956ca46038 R14: 00007f956ca45fa0 R15: 00007ffe4e6b8698 [ 59.005400][ T4377] [ 59.486968][ T4402] loop1: detected capacity change from 0 to 2048 [ 59.587971][ T4414] loop0: detected capacity change from 0 to 128 [ 59.596142][ T4402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.806926][ T4418] xt_TCPMSS: Only works on TCP SYN packets [ 59.864794][ T4422] loop4: detected capacity change from 0 to 128 [ 59.874856][ T4422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.206'. [ 59.914478][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.197607][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.242996][ T4431] loop3: detected capacity change from 0 to 164 [ 60.262890][ T4431] iso9660: Unknown parameter 'mrn' [ 60.388481][ T4438] x_tables: duplicate underflow at hook 3 [ 60.394440][ T4437] x_tables: duplicate underflow at hook 3 [ 60.473729][ T4442] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 60.540510][ T4442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.551788][ T4442] bond1: (slave bond2): making interface the new active one [ 60.559659][ T4442] bond1: (slave bond2): Enslaving as an active interface with an up link [ 60.587229][ T4450] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 60.755871][ T4456] loop3: detected capacity change from 0 to 1024 [ 60.779896][ T4460] EXT4-fs: Ignoring removed orlov option [ 60.797905][ T4460] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.802758][ T4456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.817232][ T4456] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.836672][ T4460] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.221: corrupted in-inode xattr: e_value size too large [ 60.853012][ T4460] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.853285][ T4460] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.221: couldn't read orphan inode 15 (err -117) [ 60.862432][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 60.862452][ C0] EXT4-fs (loop1): initial error at time 1774306459: ext4_iget_extra_inode:5025: inode 15 [ 60.862486][ C0] EXT4-fs (loop1): last error at time 1774306459: ext4_iget_extra_inode:5025: inode 15 [ 60.892917][ T4456] EXT4-fs: test_dummy_encryption option not supported [ 60.901018][ T4460] loop1: lost filesystem error report for type 5 error -117 [ 60.907706][ T4460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.961064][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.131611][ T4517] lo: entered allmulticast mode [ 61.139431][ T4517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.203496][ T4521] program syz.5.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.276915][ T4523] set_capacity_and_notify: 2 callbacks suppressed [ 61.276950][ T4523] loop0: detected capacity change from 0 to 256 [ 61.330703][ T4523] FAT-fs (loop0): Directory bread(block 64) failed [ 61.337330][ T4523] FAT-fs (loop0): Directory bread(block 65) failed [ 61.344619][ T4523] FAT-fs (loop0): Directory bread(block 66) failed [ 61.351254][ T4523] FAT-fs (loop0): Directory bread(block 67) failed [ 61.357803][ T4523] FAT-fs (loop0): Directory bread(block 68) failed [ 61.364324][ T4523] FAT-fs (loop0): Directory bread(block 69) failed [ 61.371131][ T4523] FAT-fs (loop0): Directory bread(block 70) failed [ 61.378428][ T4523] FAT-fs (loop0): Directory bread(block 71) failed [ 61.385067][ T4523] FAT-fs (loop0): Directory bread(block 72) failed [ 61.391646][ T4523] FAT-fs (loop0): Directory bread(block 73) failed [ 62.272654][ T4527] netlink: 'syz.5.228': attribute type 10 has an invalid length. [ 62.336038][ T4516] syz.1.222 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 62.351238][ T4516] CPU: 1 UID: 0 PID: 4516 Comm: syz.1.222 Tainted: G W syzkaller #0 PREEMPT(full) [ 62.351363][ T4516] Tainted: [W]=WARN [ 62.351368][ T4516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.351377][ T4516] Call Trace: [ 62.351382][ T4516] [ 62.351388][ T4516] __dump_stack+0x1d/0x30 [ 62.351478][ T4516] dump_stack_lvl+0x95/0xd0 [ 62.351498][ T4516] dump_stack+0x15/0x1b [ 62.351572][ T4516] dump_header+0x80/0x240 [ 62.351592][ T4516] oom_kill_process+0x295/0x350 [ 62.351610][ T4516] out_of_memory+0x97d/0xb80 [ 62.351660][ T4516] try_charge_memcg+0x62e/0xa10 [ 62.351692][ T4516] obj_cgroup_charge_pages+0x23/0xc0 [ 62.351765][ T4516] __memcg_kmem_charge_page+0x9e/0x170 [ 62.351812][ T4516] __alloc_frozen_pages_noprof+0x18a/0x360 [ 62.351904][ T4516] alloc_pages_mpol+0xb3/0x260 [ 62.351927][ T4516] alloc_pages_noprof+0x8f/0x130 [ 62.352012][ T4516] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 62.352046][ T4516] __kvmalloc_node_noprof+0x3d4/0x650 [ 62.352067][ T4516] ? futex_hash_allocate+0x190/0x9d0 [ 62.352156][ T4516] ? futex_hash_allocate+0x190/0x9d0 [ 62.352179][ T4516] futex_hash_allocate+0x190/0x9d0 [ 62.352258][ T4516] ? cap_task_prctl+0x13f/0x6e0 [ 62.352288][ T4516] futex_hash_prctl+0xd8/0xf0 [ 62.352312][ T4516] __se_sys_prctl+0xa3d/0x13f0 [ 62.352338][ T4516] __x64_sys_prctl+0x67/0x80 [ 62.352420][ T4516] x64_sys_call+0x2533/0x3020 [ 62.352511][ T4516] do_syscall_64+0x12c/0x370 [ 62.352531][ T4516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.352561][ T4516] RIP: 0033:0x7f956c7cc799 [ 62.352574][ T4516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.352588][ T4516] RSP: 002b:00007f956b206028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 62.352668][ T4516] RAX: ffffffffffffffda RBX: 00007f956ca46090 RCX: 00007f956c7cc799 [ 62.352682][ T4516] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 62.352696][ T4516] RBP: 00007f956c862c99 R08: 0000000000000000 R09: 0000000000000000 [ 62.352708][ T4516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.352720][ T4516] R13: 00007f956ca46128 R14: 00007f956ca46090 R15: 00007ffe4e6b8698 [ 62.352735][ T4516] [ 62.596448][ T4516] memory: usage 307200kB, limit 307200kB, failcnt 463 [ 62.605401][ T4516] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 62.613591][ T4516] kmem: usage 306920kB, limit 9007199254740988kB, failcnt 0 [ 62.620927][ T4516] Memory cgroup stats for /syz1: [ 62.621176][ T4516] cache 86016 [ 62.629567][ T4516] rss 4096 [ 62.633425][ T4516] shmem 0 [ 62.636401][ T4516] mapped_file 4096 [ 62.640164][ T4516] dirty 0 [ 62.643540][ T4516] writeback 0 [ 62.646916][ T4516] workingset_refault_anon 109 [ 62.651719][ T4516] workingset_refault_file 747 [ 62.656457][ T4516] swap 593920 [ 62.659749][ T4516] swapcached 995328 [ 62.664357][ T4516] pgpgin 52154 [ 62.667784][ T4516] pgpgout 52132 [ 62.671264][ T4516] pgfault 36047 [ 62.674941][ T4516] pgmajfault 93 [ 62.678530][ T4516] inactive_anon 0 [ 62.709213][ T4516] active_anon 0 [ 62.712849][ T4516] inactive_file 81920 [ 62.716838][ T4516] active_file 4096 [ 62.720649][ T4516] unevictable 0 [ 62.726715][ T4516] hierarchical_memory_limit 314572800 [ 62.732247][ T4516] hierarchical_memsw_limit 9223372036854771712 [ 62.738527][ T4516] total_cache 86016 [ 62.743258][ T4516] total_rss 4096 [ 62.746911][ T4516] total_shmem 0 [ 62.750485][ T4516] total_mapped_file 4096 [ 62.757770][ T4516] total_dirty 0 [ 62.761316][ T4516] total_writeback 0 [ 62.765265][ T4516] total_workingset_refault_anon 109 [ 62.770612][ T4516] total_workingset_refault_file 747 [ 62.776036][ T4516] total_swap 593920 [ 62.779901][ T4516] total_swapcached 995328 [ 62.784926][ T4516] total_pgpgin 52154 [ 62.788923][ T4516] total_pgpgout 52132 [ 62.793069][ T4516] total_pgfault 36047 [ 62.797087][ T4516] total_pgmajfault 93 [ 62.801109][ T4516] total_inactive_anon 0 [ 62.805497][ T4516] total_active_anon 0 [ 62.809506][ T4516] total_inactive_file 81920 [ 62.816841][ T4516] total_active_file 4096 [ 62.821132][ T4516] total_unevictable 0 [ 62.825327][ T4516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.222,pid=4508,uid=0 [ 62.840146][ T4516] Memory cgroup out of memory: Killed process 4508 (syz.1.222) total-vm:104816kB, anon-rss:1228kB, file-rss:30596kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 62.884563][ T4516] syz.1.222 (4516) used greatest stack depth: 8744 bytes left [ 62.915030][ T4531] loop0: detected capacity change from 0 to 512 [ 62.956955][ T4531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.971824][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 62.971836][ T28] audit: type=1400 audit(1774306461.783:508): avc: denied { read } for pid=4540 comm="syz.3.234" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.022348][ T4531] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.052247][ T28] audit: type=1400 audit(1774306461.783:509): avc: denied { open } for pid=4540 comm="syz.3.234" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.078151][ T4531] openvswitch: netlink: Message has 4 unknown bytes. [ 63.101580][ T28] audit: type=1400 audit(1774306461.793:510): avc: denied { allowed } for pid=4540 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.145731][ T28] audit: type=1400 audit(1774306461.823:511): avc: denied { read write } for pid=4534 comm="syz.5.232" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.200549][ T4555] ipip0: entered promiscuous mode [ 63.205153][ T28] audit: type=1400 audit(1774306461.823:512): avc: denied { open } for pid=4534 comm="syz.5.232" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.269835][ T28] audit: type=1400 audit(1774306461.853:513): avc: denied { write } for pid=4540 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 63.302274][ T28] audit: type=1400 audit(1774306461.983:514): avc: denied { create } for pid=4556 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.331326][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.361196][ T28] audit: type=1400 audit(1774306462.143:515): avc: denied { create } for pid=4569 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.492612][ T28] audit: type=1400 audit(1774306462.143:516): avc: denied { connect } for pid=4569 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.782440][ T4580] loop4: detected capacity change from 0 to 512 [ 63.800987][ T28] audit: type=1400 audit(1774306462.463:517): avc: denied { connect } for pid=4566 comm="syz.5.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.401307][ T4587] 9p: Bad value for 'source' [ 64.755766][ T4593] loop5: detected capacity change from 0 to 512 [ 64.772560][ T4594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.246'. [ 64.787763][ T4593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.825097][ T4593] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.247: iget: bad i_size value: 38620345925642 [ 64.850170][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 64.865373][ T4593] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.867417][ T4593] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.247: couldn't read orphan inode 15 (err -117) [ 64.876585][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 64.876599][ C0] EXT4-fs (loop5): initial error at time 1774306463: ext4_orphan_get:1391: inode 15 [ 64.876621][ C0] EXT4-fs (loop5): last error at time 1774306463: ext4_orphan_get:1391: inode 15 [ 65.038348][ T4593] loop5: lost filesystem error report for type 5 error -117 [ 65.038875][ T4593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.169043][ T4601] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.247: bg 0: block 5: invalid block bitmap [ 65.299452][ T4601] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 840 with error 28 [ 65.325471][ T4601] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.325471][ T4601] [ 65.629865][ T4606] loop1: detected capacity change from 0 to 128 [ 65.687477][ T4606] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.700609][ T4606] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.772017][ T4609] loop0: detected capacity change from 0 to 1024 [ 65.825841][ T4609] EXT4-fs: Ignoring removed orlov option [ 65.833457][ T4601] EXT4-fs (loop5): Total free blocks count 0 [ 65.879338][ T4601] EXT4-fs (loop5): Free/Dirty block details [ 65.892592][ T4609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.918926][ T4601] EXT4-fs (loop5): free_blocks=0 [ 65.936321][ T4601] EXT4-fs (loop5): dirty_blocks=880 [ 65.961451][ T4601] EXT4-fs (loop5): Block reservation details [ 65.968746][ T4601] EXT4-fs (loop5): i_reserved_data_blocks=880 [ 66.014380][ T4506] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 840 with max blocks 40 with error 28 [ 66.098981][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.116244][ T4615] netlink: 32 bytes leftover after parsing attributes in process `syz.5.253'. [ 66.127162][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.153082][ T4618] loop1: detected capacity change from 0 to 512 [ 66.159836][ T4618] EXT4-fs: test_dummy_encryption option not supported [ 66.236611][ T4619] loop5: detected capacity change from 0 to 512 [ 66.258068][ T4621] loop0: detected capacity change from 0 to 1024 [ 66.279193][ T4619] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.310754][ T4619] EXT4-fs (loop5): 1 truncate cleaned up [ 66.320206][ T4621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.327278][ T4619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.335082][ T4623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.362883][ T4623] wireguard0: entered promiscuous mode [ 66.368392][ T4623] wireguard0: entered allmulticast mode [ 66.388845][ T4621] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 66.409806][ T4621] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 66.452681][ T4629] loop1: detected capacity change from 0 to 164 [ 66.470222][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.489647][ T4628] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 67.228217][ T3722] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.295958][ T4648] loop5: detected capacity change from 0 to 1024 [ 67.308032][ T4651] dummy0 speed is unknown, defaulting to 1000 [ 67.338624][ T4648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.364097][ T4651] loop4: detected capacity change from 0 to 1024 [ 67.374861][ T4651] EXT4-fs: Ignoring removed nobh option [ 67.411460][ T4651] EXT4-fs: inline encryption not supported [ 67.445425][ T4651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.680415][ T4656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.763678][ T4680] syz_tun: entered allmulticast mode [ 67.769618][ T4680] syz_tun: left allmulticast mode [ 68.058024][ T4506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.153639][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.164815][ T4506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.200219][ T4687] No such timeout policy "syz0" [ 68.224980][ T4506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.255134][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 68.255148][ T28] audit: type=1400 audit(1774306467.073:557): avc: denied { bind } for pid=4697 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.280434][ T4698] loop4: detected capacity change from 0 to 1024 [ 68.291144][ T4698] loop4: detected capacity change from 0 to 128 [ 68.292024][ T4683] dummy0 speed is unknown, defaulting to 1000 [ 68.301206][ T28] audit: type=1400 audit(1774306467.073:558): avc: denied { write } for pid=4697 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.338100][ T28] audit: type=1400 audit(1774306467.073:559): avc: denied { bind } for pid=4697 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.359127][ T28] audit: type=1400 audit(1774306467.103:560): avc: denied { setopt } for pid=4697 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.379426][ T28] audit: type=1400 audit(1774306467.173:561): avc: denied { write } for pid=4699 comm="syz.4.276" name="file0" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.402786][ T28] audit: type=1400 audit(1774306467.173:562): avc: denied { open } for pid=4699 comm="syz.4.276" path="/56/file0" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.426443][ T4506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.458234][ T28] audit: type=1400 audit(1774306467.193:563): avc: denied { ioctl } for pid=4699 comm="syz.4.276" path="/56/file0" dev="tmpfs" ino=327 ioctlcmd=0x1283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.507245][ T4683] chnl_net:caif_netlink_parms(): no params data found [ 68.559667][ T28] audit: type=1400 audit(1774306467.373:564): avc: denied { execute } for pid=4713 comm="syz.1.279" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.580889][ T28] audit: type=1400 audit(1774306467.373:565): avc: denied { execute_no_trans } for pid=4713 comm="syz.1.279" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.656288][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.664102][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.671294][ T4683] bridge_slave_0: entered allmulticast mode [ 68.677669][ T4683] bridge_slave_0: entered promiscuous mode [ 68.684346][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.691375][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.699140][ T4683] bridge_slave_1: entered allmulticast mode [ 68.705572][ T4683] bridge_slave_1: entered promiscuous mode [ 68.736777][ T4703] dummy0 speed is unknown, defaulting to 1000 [ 68.754513][ T4683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.766687][ T4683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.802857][ T4506] bridge_slave_1: left allmulticast mode [ 68.812687][ T4506] bridge_slave_1: left promiscuous mode [ 68.825664][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.840861][ T4506] bridge_slave_0: left allmulticast mode [ 68.852922][ T4506] bridge_slave_0: left promiscuous mode [ 68.863548][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.871938][ T4506] veth0_to_team: left allmulticast mode [ 68.877531][ T4506] veth0_to_team: left promiscuous mode [ 68.883292][ T4506] : port 2(veth0_to_team) entered disabled state [ 68.890309][ T4506] veth0_to_bridge: left allmulticast mode [ 68.896390][ T4506] veth0_to_bridge: left promiscuous mode [ 68.902465][ T4506] : port 1(veth0_to_bridge) entered disabled state [ 68.908463][ T28] audit: type=1400 audit(1774306467.643:566): avc: denied { create } for pid=4726 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 68.968393][ T4506] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 68.983222][ T4736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.283'. [ 69.082880][ T4506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.092790][ T4506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.102316][ T4506] bond0 (unregistering): Released all slaves [ 69.110204][ T4506] bond1 (unregistering): (slave bond2): Releasing backup interface [ 69.118592][ T4506] bond1 (unregistering): Released all slaves [ 69.126849][ T4506] bond2 (unregistering): Released all slaves [ 69.145375][ T4683] team0: Port device team_slave_0 added [ 69.156571][ T4683] team0: Port device team_slave_1 added [ 69.176941][ T4506] hsr_slave_0: left promiscuous mode [ 69.182567][ T4506] hsr_slave_1: left promiscuous mode [ 69.188189][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.195676][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.203251][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.210633][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.220533][ T4506] veth1_macvtap: left promiscuous mode [ 69.226080][ T4506] veth0_macvtap: left promiscuous mode [ 69.231740][ T4506] veth1_vlan: left promiscuous mode [ 69.237001][ T4506] veth0_vlan: left promiscuous mode [ 69.294067][ T4506] team0 (unregistering): Port device team_slave_1 removed [ 69.304273][ T4506] team0 (unregistering): Port device team_slave_0 removed [ 69.335533][ T4683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.342577][ T4683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.368876][ T4683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.380528][ T4683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.388031][ T4683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.414400][ T4683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.441682][ T4683] hsr_slave_0: entered promiscuous mode [ 69.447760][ T4683] hsr_slave_1: entered promiscuous mode [ 69.453771][ T4683] debugfs: 'hsr0' already exists in 'hsr' [ 69.459492][ T4683] Cannot create hsr debugfs directory [ 69.519288][ T4703] chnl_net:caif_netlink_parms(): no params data found [ 69.576508][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.583776][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.590977][ T4703] bridge_slave_0: entered allmulticast mode [ 69.597878][ T4703] bridge_slave_0: entered promiscuous mode [ 69.616401][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.623621][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.630764][ T4703] bridge_slave_1: entered allmulticast mode [ 69.641970][ T4703] bridge_slave_1: entered promiscuous mode [ 69.705109][ T4703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.706143][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 69.716028][ T4703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.762758][ T4506] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.778232][ T4703] team0: Port device team_slave_0 added [ 69.789177][ T4772] loop4: detected capacity change from 0 to 164 [ 69.800862][ T4703] team0: Port device team_slave_1 added [ 69.892241][ T4506] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.932802][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.945259][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.971702][ T4703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.987226][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.994966][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.060162][ T4703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.390508][ T4506] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.432971][ T4703] hsr_slave_0: entered promiscuous mode [ 70.439155][ T4703] hsr_slave_1: entered promiscuous mode [ 70.445859][ T4703] debugfs: 'hsr0' already exists in 'hsr' [ 70.452260][ T4703] Cannot create hsr debugfs directory [ 70.460557][ T4506] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.473869][ T4683] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.489226][ T4683] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.516012][ T4683] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.547505][ T4683] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.617586][ T4506] bridge_slave_1: left allmulticast mode [ 70.623330][ T4506] bridge_slave_1: left promiscuous mode [ 70.628922][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.672075][ T4506] bridge_slave_0: left allmulticast mode [ 70.677704][ T4506] bridge_slave_0: left promiscuous mode [ 70.683670][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.791011][ T4834] loop0: detected capacity change from 0 to 736 [ 70.818666][ T4834] rock: directory entry would overflow storage [ 70.830806][ T4506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.839675][ T4834] rock: sig=0x3b10, size=4, remaining=3 [ 70.847807][ T4506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.859843][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 70.859955][ T4506] bond0 (unregistering): Released all slaves [ 70.926732][ T4506] hsr_slave_0: left promiscuous mode [ 70.936290][ T4506] hsr_slave_1: left promiscuous mode [ 70.942118][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.949481][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.957656][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.966754][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.994535][ T4506] veth1_macvtap: left promiscuous mode [ 71.004446][ T4506] veth0_macvtap: left promiscuous mode [ 71.013771][ T4850] loop1: detected capacity change from 0 to 1024 [ 71.020138][ T4506] veth1_vlan: left promiscuous mode [ 71.025822][ T4850] EXT4-fs: inline encryption not supported [ 71.035645][ T4850] EXT4-fs: Ignoring removed bh option [ 71.046815][ T4506] veth0_vlan: left promiscuous mode [ 71.062940][ T4850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.078067][ T4850] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.295: Allocating blocks 449-513 which overlap fs metadata [ 71.123921][ T4506] team0 (unregistering): Port device team_slave_1 removed [ 71.133916][ T4506] team0 (unregistering): Port device team_slave_0 removed [ 71.161104][ T4703] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.170002][ T4703] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.197627][ T4703] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.215309][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.228498][ T4703] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.264163][ T4870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 71.293674][ T4870] geneve1: entered promiscuous mode [ 71.298933][ T4870] macsec1: entered promiscuous mode [ 71.304544][ T4870] macsec1: entered allmulticast mode [ 71.309862][ T4870] geneve1: entered allmulticast mode [ 71.317979][ T4870] geneve1: left allmulticast mode [ 71.323477][ T4870] geneve1: left promiscuous mode [ 71.346905][ T4683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.367581][ T4683] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.380739][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.387874][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.407007][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.414084][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.474979][ T4683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.491158][ T4683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.505344][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.557500][ T4703] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.578114][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.585253][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.613528][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.620601][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.668938][ T4683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.686412][ T4703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.694561][ T4910] FAULT_INJECTION: forcing a failure. [ 71.694561][ T4910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.713190][ T4910] CPU: 0 UID: 0 PID: 4910 Comm: syz.1.303 Tainted: G W syzkaller #0 PREEMPT(full) [ 71.713272][ T4910] Tainted: [W]=WARN [ 71.713279][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.713289][ T4910] Call Trace: [ 71.713294][ T4910] [ 71.713300][ T4910] __dump_stack+0x1d/0x30 [ 71.713347][ T4910] dump_stack_lvl+0x95/0xd0 [ 71.713366][ T4910] dump_stack+0x15/0x1b [ 71.713422][ T4910] should_fail_ex+0x263/0x280 [ 71.713443][ T4910] should_fail+0xb/0x20 [ 71.713460][ T4910] should_fail_usercopy+0x1a/0x20 [ 71.713479][ T4910] _copy_to_user+0x20/0xa0 [ 71.713572][ T4910] simple_read_from_buffer+0xb5/0x130 [ 71.713654][ T4910] proc_fail_nth_read+0x10e/0x150 [ 71.713676][ T4910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.713746][ T4910] vfs_read+0x1ab/0x7f0 [ 71.713772][ T4910] ? __rcu_read_unlock+0x4e/0x70 [ 71.713852][ T4910] ? __fget_files+0x184/0x1c0 [ 71.713874][ T4910] ? mutex_lock+0x57/0x90 [ 71.713901][ T4910] ksys_read+0xdc/0x1a0 [ 71.713918][ T4910] __x64_sys_read+0x40/0x50 [ 71.713961][ T4910] x64_sys_call+0x2886/0x3020 [ 71.713985][ T4910] do_syscall_64+0x12c/0x370 [ 71.714003][ T4910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.714060][ T4910] RIP: 0033:0x7f956c78cfce [ 71.714113][ T4910] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.714129][ T4910] RSP: 002b:00007f956b226fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.714146][ T4910] RAX: ffffffffffffffda RBX: 00007f956b2276c0 RCX: 00007f956c78cfce [ 71.714157][ T4910] RDX: 000000000000000f RSI: 00007f956b2270a0 RDI: 0000000000000004 [ 71.714167][ T4910] RBP: 00007f956b227090 R08: 0000000000000000 R09: 0000000000000000 [ 71.714179][ T4910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.714260][ T4910] R13: 00007f956ca46038 R14: 00007f956ca45fa0 R15: 00007ffe4e6b8698 [ 71.714278][ T4910] [ 71.957781][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.058532][ T4938] loop1: detected capacity change from 0 to 512 [ 72.081344][ T4683] veth0_vlan: entered promiscuous mode [ 72.091080][ T4938] EXT4-fs: Ignoring removed oldalloc option [ 72.112662][ T4938] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.308: invalid indirect mapped block 4294967295 (level 1) [ 72.128270][ T4683] veth1_vlan: entered promiscuous mode [ 72.156579][ T4938] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.156804][ T4938] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.308: invalid indirect mapped block 4294967295 (level 1) [ 72.165973][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 72.165994][ C0] EXT4-fs (loop1): initial error at time 1774306470: ext4_free_branches:1023: inode 11 [ 72.166039][ C0] EXT4-fs (loop1): last error at time 1774306470: ext4_free_branches:1023: inode 11 [ 72.208064][ T4683] veth0_macvtap: entered promiscuous mode [ 72.223912][ T4683] veth1_macvtap: entered promiscuous mode [ 72.264254][ T4683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.280054][ T4683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.292075][ T4507] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.300861][ T4507] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.309659][ T4938] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.310392][ T4938] EXT4-fs (loop1): 2 truncates cleaned up [ 72.325266][ T4507] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.335101][ T4938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.336219][ T4507] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.378644][ T4703] veth0_vlan: entered promiscuous mode [ 72.417416][ T4963] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.308: bg 0: block 5: invalid block bitmap [ 72.431719][ T4703] veth1_vlan: entered promiscuous mode [ 72.445337][ T4963] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.308: path /73/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 72.472429][ T4703] veth0_macvtap: entered promiscuous mode [ 72.479573][ T4703] veth1_macvtap: entered promiscuous mode [ 72.526520][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.548530][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.898917][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.945542][ T4481] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.002661][ T4481] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.050095][ T4481] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.079859][ T4481] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.089028][ T4995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.311'. [ 73.179034][ T5003] loop4: detected capacity change from 0 to 512 [ 73.216394][ T5003] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.269740][ T5003] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 73.337790][ T5003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 73.356784][ T5017] 9p: Bad value for 'rfdno' [ 73.362553][ T5003] System zones: 0-2, 18-18, 34-34 [ 73.372253][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 73.372280][ T28] audit: type=1326 audit(1774306472.193:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.418306][ T5003] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.315: bad orphan inode 15 [ 73.435840][ T5003] loop4: lost filesystem error report for type 5 error -117 [ 73.435994][ T5003] ext4_test_bit(bit=14, block=18) = 1 [ 73.443323][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 73.443358][ C1] EXT4-fs (loop4): initial error at time 1774306472: ext4_orphan_get:1417 [ 73.443386][ C1] EXT4-fs (loop4): last error at time 1774306472: ext4_orphan_get:1417 [ 73.451828][ T5020] loop3: detected capacity change from 0 to 2048 [ 73.484563][ T28] audit: type=1326 audit(1774306472.193:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.527484][ T28] audit: type=1326 audit(1774306472.193:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.541824][ T5003] is_bad_inode(inode)=0 [ 73.556333][ T28] audit: type=1326 audit(1774306472.193:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.580415][ T5020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.581587][ T5003] NEXT_ORPHAN(inode)=2264924160 [ 73.593121][ T5020] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.608153][ T5003] max_ino=32 [ 73.608170][ T5003] i_nlink=0 [ 73.628795][ T28] audit: type=1326 audit(1774306472.233:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.653097][ T5003] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2970: inode #15: comm syz.4.315: corrupted xattr block 19: overlapping e_value [ 73.678641][ T5003] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.678920][ T5003] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 73.698147][ T28] audit: type=1326 audit(1774306472.233:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.727986][ T5003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.755358][ T28] audit: type=1326 audit(1774306472.233:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.784841][ T28] audit: type=1326 audit(1774306472.233:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.809009][ T28] audit: type=1326 audit(1774306472.233:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.863625][ T28] audit: type=1326 audit(1774306472.233:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f668ccdc799 code=0x7ffc0000 [ 73.892972][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.906727][ T5034] loop0: detected capacity change from 0 to 512 [ 73.931772][ T5037] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.316: bg 0: block 345: padding at end of block bitmap is not set [ 74.043046][ T5037] EXT4-fs (loop3): Remounting filesystem read-only [ 74.486590][ T4504] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 74.502592][ T5041] dummy0 speed is unknown, defaulting to 1000 [ 74.567819][ T5055] loop6: detected capacity change from 0 to 512 [ 74.592957][ T5057] netlink: 116 bytes leftover after parsing attributes in process `syz.4.325'. [ 74.675527][ T5066] netlink: 28 bytes leftover after parsing attributes in process `syz.6.328'. [ 74.685812][ T5066] netlink: 'syz.6.328': attribute type 7 has an invalid length. [ 74.692254][ T5068] loop4: detected capacity change from 0 to 128 [ 74.694425][ T5066] netlink: 'syz.6.328': attribute type 8 has an invalid length. [ 74.708709][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.328'. [ 74.826651][ T4683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.865234][ T5079] loop3: detected capacity change from 0 to 1024 [ 74.921859][ T5079] EXT4-fs: inline encryption not supported [ 74.960042][ T5072] syz.4.329: attempt to access beyond end of device [ 74.960042][ T5072] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 74.962582][ T5079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.976750][ T5072] syz.4.329: attempt to access beyond end of device [ 74.976750][ T5072] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 75.007378][ T5076] loop6: detected capacity change from 0 to 128 [ 75.056455][ T5072] syz.4.329: attempt to access beyond end of device [ 75.056455][ T5072] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 75.056756][ T5079] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 75.102719][ T5079] EXT4-fs (loop3): Remounting filesystem read-only [ 75.133059][ T5072] syz.4.329: attempt to access beyond end of device [ 75.133059][ T5072] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 75.165251][ T5076] 9p: Could not find request transport: xen [ 75.173716][ T5096] netlink: 'syz.6.333': attribute type 10 has an invalid length. [ 75.199914][ T5096] team0: Port device dummy0 added [ 75.202167][ T5072] syz.4.329: attempt to access beyond end of device [ 75.202167][ T5072] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 75.218883][ T5076] netlink: 'syz.6.333': attribute type 10 has an invalid length. [ 75.231375][ T4683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.250911][ T5072] syz.4.329: attempt to access beyond end of device [ 75.250911][ T5072] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 75.311266][ T5076] team0: Port device dummy0 removed [ 75.311666][ T5072] syz.4.329: attempt to access beyond end of device [ 75.311666][ T5072] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 75.311701][ T5072] syz.4.329: attempt to access beyond end of device [ 75.311701][ T5072] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 75.353784][ T5072] syz.4.329: attempt to access beyond end of device [ 75.353784][ T5072] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 76.225028][ T5076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.264087][ T5072] syz.4.329: attempt to access beyond end of device [ 76.264087][ T5072] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 76.282472][ T5113] tap0: tun_chr_ioctl cmd 1074025677 [ 76.293104][ T5113] tap0: linktype set to 778 [ 76.445528][ T5119] netlink: 104 bytes leftover after parsing attributes in process `syz.1.344'. [ 76.934027][ T5119] loop1: detected capacity change from 0 to 1024 [ 76.951806][ T5134] xt_hashlimit: size too large, truncated to 1048576 [ 76.970452][ T5136] veth0_virt_wifi: entered allmulticast mode [ 76.976977][ T5119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.014149][ T5140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5140 comm=syz.3.347 [ 77.056046][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.106259][ T5129] loop4: detected capacity change from 0 to 512 [ 77.115478][ T5129] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.153171][ T5148] loop0: detected capacity change from 0 to 164 [ 77.214988][ T5129] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.345: Failed to acquire dquot type 1 [ 77.217809][ T5148] iso9660: Unknown parameter 'dmo000800' [ 77.249082][ T5158] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 77.262387][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 77.273864][ T5129] loop4: lost filesystem error report for type 5 error -5 [ 77.275369][ T5129] EXT4-fs (loop4): 1 truncate cleaned up [ 77.282510][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 77.282524][ C0] EXT4-fs (loop4): last error at time 1774306476: ext4_acquire_dquot:7001 [ 77.295604][ T5160] loop6: detected capacity change from 0 to 1024 [ 77.303553][ T5129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 77.352644][ T5160] EXT4-fs: Ignoring removed orlov option [ 77.447118][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 77.459951][ T5160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.196721][ T5169] netlink: 'syz.3.357': attribute type 21 has an invalid length. [ 78.208271][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 78.235168][ T5171] capability: warning: `syz.1.358' uses deprecated v2 capabilities in a way that may be insecure [ 78.249232][ T5169] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.263050][ T5169] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 78.290947][ T4703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.435405][ T5181] loop4: detected capacity change from 0 to 512 [ 78.499801][ T5181] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 78.581671][ T5181] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.361: inode has both inline data and extents flags [ 78.611431][ T5181] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.611660][ T5181] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.361: couldn't read orphan inode 13 (err -117) [ 78.632521][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.632536][ C0] EXT4-fs (loop4): initial error at time 1774306477: ext4_orphan_get:1391: inode 13 [ 78.632558][ C0] EXT4-fs (loop4): last error at time 1774306477: ext4_orphan_get:1391: inode 13 [ 78.680574][ T5181] loop4: lost filesystem error report for type 5 error -117 [ 78.682050][ T5177] loop3: detected capacity change from 0 to 1024 [ 78.701213][ T5181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.754486][ T28] kauditd_printk_skb: 258 callbacks suppressed [ 78.754499][ T28] audit: type=1326 audit(1774306477.573:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 78.766765][ T5206] netlink: 'syz.0.364': attribute type 29 has an invalid length. [ 78.792545][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.798005][ T5177] EXT4-fs: Ignoring removed orlov option [ 78.819017][ T5177] ext4: Unknown parameter 'mask' [ 78.832809][ T28] audit: type=1326 audit(1774306477.573:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 78.857153][ T5210] netlink: 'syz.0.364': attribute type 29 has an invalid length. [ 78.888164][ T5206] netlink: 500 bytes leftover after parsing attributes in process `syz.0.364'. [ 78.904183][ T28] audit: type=1326 audit(1774306477.573:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 78.912218][ T5206] unsupported nla_type 58 [ 78.966098][ T28] audit: type=1326 audit(1774306477.573:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 78.993491][ T5214] loop6: detected capacity change from 0 to 128 [ 79.043981][ T28] audit: type=1326 audit(1774306477.573:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 79.534784][ T28] audit: type=1326 audit(1774306477.573:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 79.582767][ T28] audit: type=1326 audit(1774306477.583:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 79.616258][ T5231] loop3: detected capacity change from 0 to 512 [ 79.639800][ T5231] EXT4-fs: Ignoring removed oldalloc option [ 79.646472][ T28] audit: type=1326 audit(1774306477.583:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 79.646548][ T28] audit: type=1326 audit(1774306477.583:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 79.646570][ T28] audit: type=1326 audit(1774306477.583:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5204 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b84c799 code=0x7ffc0000 [ 79.889800][ T5231] EXT4-fs (loop3): 1 truncate cleaned up [ 79.908637][ T5231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.961985][ T5252] loop4: detected capacity change from 0 to 128 [ 80.092982][ T5257] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.375'. [ 80.521314][ T4683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.872302][ T3399] ================================================================== [ 80.880397][ T3399] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 80.889074][ T3399] [ 80.891387][ T3399] read-write to 0xffff8881005f0588 of 8 bytes by task 4683 on cpu 0: [ 80.899444][ T3399] delete_from_page_cache_batch+0x569/0x750 [ 80.905345][ T3399] truncate_inode_pages_range+0x1fe/0x7e0 [ 80.911059][ T3399] truncate_inode_pages+0x24/0x30 [ 80.916070][ T3399] blkdev_flush_mapping+0xa4/0x1a0 [ 80.921167][ T3399] bdev_release+0x2bf/0x3d0 [ 80.925650][ T3399] blkdev_release+0x15/0x20 [ 80.930138][ T3399] __fput+0x29b/0x650 [ 80.934104][ T3399] ____fput+0x1c/0x30 [ 80.938069][ T3399] task_work_run+0x130/0x1a0 [ 80.942639][ T3399] exit_to_user_mode_loop+0x1f4/0x6f0 [ 80.947993][ T3399] do_syscall_64+0x249/0x370 [ 80.952566][ T3399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.958444][ T3399] [ 80.960744][ T3399] read to 0xffff8881005f0588 of 8 bytes by task 3399 on cpu 1: [ 80.968263][ T3399] nr_blockdev_pages+0x7e/0xd0 [ 80.973007][ T3399] si_meminfo+0x87/0xd0 [ 80.977142][ T3399] update_defense_level+0x47/0x5d0 [ 80.982235][ T3399] defense_work_handler+0x1f/0x80 [ 80.987238][ T3399] process_scheduled_works+0x513/0xa10 [ 80.992682][ T3399] worker_thread+0x58a/0x780 [ 80.997254][ T3399] kthread+0x22a/0x280 [ 81.001301][ T3399] ret_from_fork+0x150/0x360 [ 81.005877][ T3399] ret_from_fork_asm+0x1a/0x30 [ 81.010629][ T3399] [ 81.012932][ T3399] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 81.020011][ T3399] [ 81.022314][ T3399] Reported by Kernel Concurrency Sanitizer on: [ 81.028445][ T3399] CPU: 1 UID: 0 PID: 3399 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.039360][ T3399] Tainted: [W]=WARN [ 81.043138][ T3399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.053179][ T3399] Workqueue: events_long defense_work_handler [ 81.059231][ T3399] ================================================================== [ 81.225961][ T5260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.377'. [ 81.672983][ T50] bio_check_eod: 58 callbacks suppressed [ 81.672997][ T50] kworker/u8:3: attempt to access beyond end of device [ 81.672997][ T50] loop4: rw=1, sector=145, nr_sectors = 896 limit=128