last executing test programs: 4m27.166679041s ago: executing program 3 (id=526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x40000000}, {{@in6=@mcast2, 0x4d4, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x5000000, 0x32}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54}]}]}, 0x17c}}, 0x0) 4m27.026029121s ago: executing program 3 (id=527): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180040040000000000000000140000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4m26.906243339s ago: executing program 3 (id=528): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003010101"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8880) (rerun: 64) close(r1) getrandom(0x0, 0x0, 0x100000000000001) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4m26.862421592s ago: executing program 3 (id=529): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x120488f, &(0x7f0000001f80)=ANY=[], 0x81, 0x65b, &(0x7f00000007c0)="$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") r1 = open(&(0x7f00000004c0)='.\x00', 0x432000, 0x20) getdents(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xf, r4, 0x0, &(0x7f0000000440)="18607651149d7b10b4024fbba8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e09000000566d1da0a333dd65e330ebf71c5e823f2753c5fdb44cc4c7b3664e29fb00"/122) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000540)=ANY=[@ANYBLOB="7dc476e1d7814ecccb6a155305c10e16a0be5ff9857ebc2dc7bcf2eae703a1fe666dfe95a6731fef8a10dc23174d02494704892592d6de436be054233a582340310b98d10a3dd13320d0aa75362f9c72e5ec3c231954400e3d705bd7cbe678b0589ffe75e2ca04ab27381ba268d1deb3bfac1625999c6c6f2bd7c7c017bb692c874c9dd93247332deccdbfe2dc8399116231ab7a60c265059e28befc990ae3b1201b7dfc2ebef1a0e37df11232f1fb5e7a6737f6cf363af94b58ac7d17"], 0x0) ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) 4m26.723579371s ago: executing program 3 (id=531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 4m24.699132169s ago: executing program 3 (id=552): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000050000000000000000140000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4m24.699032789s ago: executing program 32 (id=552): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000050000000000000000140000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4m5.429738807s ago: executing program 1 (id=665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x2000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x2000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(r0, &(0x7f0000000680)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x2, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x36}}, {0x4e24, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x81, 0xdb, "e8d7ec6b"}}}}, 0x3e) 4m4.884839474s ago: executing program 1 (id=668): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = socket(0x40000000015, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x4000010) bind$inet(r5, 0x0, 0x0) sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) 4m4.622076312s ago: executing program 1 (id=669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000003c0000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000006000008000000080000fcffffff0a010102000000000000000000000000000000003200000000000000000000060000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 4m4.474077462s ago: executing program 1 (id=671): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) close(r2) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r3) unshare(0x22020400) socket$inet6(0xa, 0x80002, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c06, 0x3) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000380)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) write$evdev(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x850040, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) socket$qrtr(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10208, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) io_uring_setup(0x4d9d, &(0x7f0000000140)={0x0, 0x28f2, 0x8, 0x3, 0x22a, 0x0, r1}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000002e00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002dc0)={&(0x7f00000043c0)={0x18f8, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x18a4, 0x8, 0x0, 0x1, [{0x868, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x85c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}]}, {0x8ec, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x3c8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "022073abc82bcd20f55afcee1d07ce05fa78cfffdbe713b3a521e37dff147a07"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x354, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x344, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}, {0x2e4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a75dd5aa2d928c04cdffa3c4d840317846e36b4dcae37ae2c376014cf3492547"}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0xff}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x154, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a179e05f39761b654f8c4845caa98f26f5ef4d2f75f6bcc6a8f84eba02454f3"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "528244f3556d1d395746c4c1aab23cd5dea79f47a46aa05ce23eacedffe9dd9e"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "648ac610a62b3fa5643cc03d1d1060710655309338c2f942b6e4d12eb73ef6e3"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd5f8ab1669d5b5d7672a5afabd499cf12eb0f7764419bfb86ec1086b0fb1088"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x18f8}, 0x1, 0x0, 0x0, 0x48800}, 0x4040045) 4m3.562848774s ago: executing program 1 (id=673): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9641, 0x6}, 0x107200, 0x10004, 0x0, 0x5, 0xa, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880010001"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x401, 0x5, {{0xa, 0x4, 0x0, 0x3d, 0x28, 0x66, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x84, 0x2}, @generic={0x44, 0x9, "2fbb16c87915c6"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r1, 0x1, 0x6}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) setresuid(0xee00, 0xee00, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000080)=0x0) setresuid(r2, r3, r4) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x6, 0x0, 0x0) getdents(r0, &(0x7f0000000200)=""/185, 0xb9) 4m3.425933993s ago: executing program 1 (id=675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x40000000}, {{@in6=@mcast2, 0x4d4, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in=@local, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54}]}]}, 0x17c}}, 0x0) 3m48.168925529s ago: executing program 33 (id=675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x40000000}, {{@in6=@mcast2, 0x4d4, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in=@local, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54}]}]}, 0x17c}}, 0x0) 3m35.840241876s ago: executing program 4 (id=837): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x16, 0x20, 0x37, &(0x7f0000000000)="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"}) ioctl$VT_ACTIVATE(r0, 0x4b44, 0x40000000000fc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) add_key$keyring(0x0, &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000)) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) syslog(0x2, &(0x7f00000008c0)=""/66, 0x42) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000440)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getownex(r2, 0x10, &(0x7f0000000540)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) 3m35.465517532s ago: executing program 4 (id=847): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000162000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) madvise(&(0x7f0000a8b000/0x3000)=nil, 0x3000, 0x14) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 3m35.349924029s ago: executing program 4 (id=849): syz_emit_ethernet(0x130, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @udp={{0x23, 0x4, 0x0, 0x1, 0x122, 0x67, 0x0, 0x5, 0x11, 0x0, @remote, @private=0xa010102, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x3, [{@private=0xa010102, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbbcb}]}, @timestamp_prespec={0x44, 0x3c, 0xeb, 0x3, 0x0, [{@private=0xa010100, 0x8}, {@private=0xa010102, 0x9}, {@private=0xa010102, 0x6}, {@local, 0x5ae}, {@local, 0x3}, {@remote, 0x80000001}, {@local, 0x4}]}, @lsrr={0x83, 0x1b, 0xec, [@multicast2, @broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @empty]}]}}, {0x4e24, 0x4e22, 0x96, 0x0, @gue={{0x2, 0x1, 0x2, 0x6, 0x100, @val=0x80}, "89baacd3842107138dd7596320c76d8c5d2b2250a24ed0531c80fd93b8cb3ecb8282b24c07b1c6cfed9eee8a0c6c98b4461a2597f80211c534f1efeb8975dbed4e76f52aa10c1bb4ab24e0a0bdaa0f0f99003bc7d23d79a7f1b35ab307496dcd9e2abc656a9cabaeb287cc620cbf3b4d2378fffe9bcd8a6c267f396f8600d8e109ac3e2b736a"}}}}}}, 0x0) 3m35.34187132s ago: executing program 4 (id=850): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd, 0x3, 0x4, 0x7, 0x1, r4, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xffffffff00000000}, 0x38) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 3m33.709232791s ago: executing program 4 (id=853): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) (async) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2e098d82fde6dba5614d96565c673f893729377685a896ee02018f5d0f83d7f921f9712c8702d305c8c91cbfe1493e8598d611be62863fa02b88e886240514fc8d2d62f72dac126481ef08ca8eaf6de", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") (async) r4 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="1000a204080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) (async) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000680)={'binder1\x00'}) 3m33.651886355s ago: executing program 4 (id=856): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000040200000000000000140000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 3m33.613802157s ago: executing program 34 (id=856): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000040200000000000000140000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 3m23.5537423s ago: executing program 7 (id=897): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910"], 0x0) poll(0x0, 0x0, 0x9) syz_clone3(&(0x7f0000000300)={0x101080, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, {0x40}, &(0x7f0000000580)=""/219, 0xdb, &(0x7f00000006c0)=""/251, &(0x7f0000000240)=[r0], 0x1}, 0x58) prlimit64(r4, 0x4, &(0x7f0000000280)={0x6, 0xb}, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b) r6 = socket(0xa, 0x5, 0xa) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="97ff0000", @ANYRES16=r3, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 3m22.151285345s ago: executing program 7 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0xffffffff, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x4, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) socket$inet6(0xa, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 3m22.075106761s ago: executing program 7 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2000000002}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4) 3m21.986680657s ago: executing program 7 (id=902): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd, 0x3, 0x4, 0x7, 0x1, r4, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xffffffff00000000}, 0x38) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) 3m21.009633293s ago: executing program 7 (id=905): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3ae00fe1001000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 3m18.429895168s ago: executing program 7 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xf17}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xdf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '#'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m17.402378378s ago: executing program 35 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xf17}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xdf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '#'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m10.090650709s ago: executing program 8 (id=1316): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[], 0x4, 0x3) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x10, 0x0, 0x8, 0x400c8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0xd188, 0x865, 0x800000, 0x0, 0x2, 0x202, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000001c0)={r4, 0x401, 0x9, 0x8001}) ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, &(0x7f0000000280)={0x8, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r9) 2m3.427913052s ago: executing program 8 (id=1369): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1f, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x8040, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_any}, {@noxattr}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000080a01010000000000000000020000090900010073797a300000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r7, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000100), 0x0, 0x2000000000000007}}, 0x40) 2m2.058866614s ago: executing program 8 (id=1377): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = socket(0x40000000015, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x4000010) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000001a000100000000000000014010000"], 0x20}, 0x0) 2m1.995770089s ago: executing program 8 (id=1378): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) (async) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (async) 2m1.82866905s ago: executing program 8 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x82002, 0x105) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="c2e512c476edbffe2d1000008100", 0xe}], 0x1}, 0x4000080) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = open(&(0x7f0000000240)='.\x00', 0x8000, 0x3) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 2m1.597811376s ago: executing program 8 (id=1387): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r0, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x2, 0x0) (async) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', 0x0) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) getdents64(r1, 0x0, 0x0) (async) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000800000001000100090000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000df83000400000000837000100000000000000020"], 0x24, 0x0) socket$key(0xf, 0x3, 0x2) (async) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) 2m1.597416826s ago: executing program 36 (id=1387): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r0, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x2, 0x0) (async) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', 0x0) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) getdents64(r1, 0x0, 0x0) (async) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000800000001000100090000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000df83000400000000837000100000000000000020"], 0x24, 0x0) socket$key(0xf, 0x3, 0x2) (async) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) 5.941652178s ago: executing program 2 (id=2116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4f9, &(0x7f00000003c0)="$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") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2b, 'io'}, {0x2b, 'cpuacct'}]}, 0xd) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4f9, &(0x7f00000003c0)="$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") (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2b, 'io'}, {0x2b, 'cpuacct'}]}, 0xd) (async) 4.184750917s ago: executing program 2 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2000000002}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4) 4.089498193s ago: executing program 6 (id=2121): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82641, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x9, 0x7}, 0x434, 0xa88, 0x8406, 0x1, 0x0, 0x3c, 0xf5ff, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) keyctl$revoke(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) keyctl$read(0xb, 0x0, &(0x7f0000000280)=""/90, 0x5a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x10) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.595683306s ago: executing program 6 (id=2136): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) waitid(0x2, 0x0, 0x0, 0xe, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000001000100"], 0x408100) creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000002400000034000100ffbfffff95"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x3fffffffc, 0x4}, 0x2000, 0x0, 0x0, 0x8, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffff7ff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d7, &(0x7f0000000000)={0x0, 0x7f36, 0x8000, 0x1, 0x20034f}, 0x0, 0x0, 0x0) 3.298202297s ago: executing program 2 (id=2143): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x74070}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.129931038s ago: executing program 2 (id=2144): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80890a, &(0x7f0000000200)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$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") creat(&(0x7f0000000200)='./file0\x00', 0x12c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x79c1, &(0x7f0000000180)={0x0, 0x9375, 0x40, 0x2, 0x34a}, &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r1, 0x446a, 0x381c, 0x0, &(0x7f0000000000), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = getpid() prlimit64(r4, 0x3, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x25, 0x0, @val=@iter={&(0x7f00000001c0)=@task={r4, r5, r6}, 0x10}}, 0x20) syz_emit_ethernet(0xe80, &(0x7f0000001b00)=ANY=[], 0x0) 2.616329973s ago: executing program 9 (id=2148): ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0x5acd12c6ec802be9, &(0x7f0000000200)={0xf, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0xfffffed2) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) (async) mmap(&(0x7f00004b6000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x1aa30000) sendmsg$NFT_BATCH(r2, 0x0, 0x44010) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000192000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000b03000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r4 = io_uring_setup(0xd, &(0x7f0000000140)={0x0, 0x649a, 0x1000, 0x8, 0x218}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) (async, rerun: 32) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000240)=@phonet, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f0000000540)=""/142, 0x8e}], 0x4}, 0x7}, {{&(0x7f0000000640)=@qipcrtr, 0x80, &(0x7f0000001a00)=[{&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f0000000700)=""/66, 0x42}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/121, 0x79}, {&(0x7f0000001900)=""/178, 0xb2}, {&(0x7f00000019c0)=""/46, 0x2e}], 0x8, &(0x7f0000001a80)=""/132, 0x84}, 0xf}, {{&(0x7f0000001b40)=@nfc, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001bc0)=""/11, 0xb}, {&(0x7f0000001c00)=""/252, 0xfc}, {&(0x7f0000001d00)=""/223, 0xdf}, {&(0x7f0000001e00)=""/59, 0x3b}], 0x4, &(0x7f0000001e80)=""/101, 0x65}, 0x18000}, {{&(0x7f0000001f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f80)=""/39, 0x27}, {&(0x7f0000001fc0)=""/66, 0x42}, {&(0x7f0000002040)=""/217, 0xd9}, {&(0x7f0000002140)=""/123, 0x7b}], 0x4}, 0x4df9}, {{&(0x7f0000002200)=@l2tp, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/177, 0xb1}, {&(0x7f0000002340)=""/211, 0xd3}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f00000024c0)=""/77, 0x4d}], 0x4, &(0x7f0000002580)=""/242, 0xf2}, 0x6}], 0x5, 0x2, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10000, 0x3, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 2.51640182s ago: executing program 2 (id=2149): socket(0x2b, 0x80801, 0x1) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r2, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r1, 0x0}, 0x0, 0x0]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00', 0x0) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) splice(r1, &(0x7f00000001c0)=0x8, r1, &(0x7f0000000200), 0x7f, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.422977466s ago: executing program 6 (id=2150): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f8008000140"], 0x168}}, 0x0) r3 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x189042, 0x1a0) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200800}) open_by_handle_at(r3, &(0x7f00000000c0)=@ocfs2_parent={0x18, 0x2, {{0x7, 0x3}, {0x2, 0x0, 0x3}}}, 0x10000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x6, 0xdcb4053ce583eebf}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.416321877s ago: executing program 9 (id=2151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01080000000000000000028a550908000240000000020900010073797a310000000040000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400f130cd514000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2800) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) close(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000000)={r2, 0x0, 0x4, 0x1, 0x1, 0xf}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000080)) dup(r2) 2.297184295s ago: executing program 6 (id=2152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000200)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x1, 0x51a, &(0x7f0000000580)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="7ebcd85055cff227599ad8f16ceaa006957eeefdd24e0d5164977119100757dfeb49a03035a5635a6e1f78922d4fbe95235e4a87dc2e0806f66a07849b6caf71c76591f22479284744c5528f7d2a071d277eb9831c4dfd7a670400000000000000ef2f2500631a63634a2d90163384d9b0e413127a3d76755d30ae284363c4f266d0fd2bec94dc3d961c7cafc3a3282ac3f965c7465216f00912cc7d64fc442d8cd44eff1cb8aedcb615d98fd72c976e8f36cded50", 0xb5}, {0x0}], 0x2}}], 0x1, 0x40000c1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000010000000000000000000000653c00004500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) renameat2(r1, &(0x7f0000000000)='./bus/file0\x00', r7, &(0x7f00000000c0)='./file2\x00', 0x1) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2010002, &(0x7f00000000c0)={[{@dioread_nolock}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nouid32}]}, 0x1, 0x55b, &(0x7f0000001040)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c7HvENEr6Y+RLxy+LEkkMehyZY2xfnaeOq9X9dwXJg/aioM989ezMw65OOnAS3GahbhaLDwaVtDR3ZOA4Ti86EedEwAAAAAAAAAAAAAA4CTD+BumUZcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+s/AQAA///31MGg") r8 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r9, &(0x7f0000000740)=[{&(0x7f0000000400)=""/125, 0x7d}], 0x1, &(0x7f0000000940), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x20000008) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC, @ANYRESOCT], 0x1, 0x214, &(0x7f0000000840)="$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") mknod$loop(0x0, 0x6000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x505200, 0x0) 2.294219795s ago: executing program 9 (id=2153): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2795, 0x40}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x2, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2010008, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@delalloc}]}, 0xfe, 0x548, &(0x7f0000001300)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 2.22423579s ago: executing program 2 (id=2155): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000100000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000006000008000000080000fcffffff0a010102000000000000000000000000000000003200000000000000000000060000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 2.164269894s ago: executing program 37 (id=2155): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000100000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000006000008000000080000fcffffff0a010102000000000000000000000000000000003200000000000000000000060000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1.970641797s ago: executing program 9 (id=2158): symlink(0x0, &(0x7f0000000040)='./file0/../file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x2000000, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4c814) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) preadv(r4, &(0x7f0000003840)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x6, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sync() sync() getpgrp(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r6, 0x541b, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) get_mempolicy(0x0, 0x0, 0x1, &(0x7f000051f000/0x2000)=nil, 0x2) 1.871492444s ago: executing program 6 (id=2159): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x4}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004884}, 0x24040804) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r3, 0x8948, &(0x7f0000000300)={'bond0\x00', @ifru_settings={0x10001, 0x800, @fr=0x0}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111cc00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000240012800b0001006d61637365630000150002800500070001000000050008000000000008000500", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.76676204s ago: executing program 0 (id=2162): r0 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r1, 0xfffff789) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4ea3, @empty}}, 0x1000, 0x2, 0x8005, 0x101, 0x4c, 0x8, 0xfc}, 0x9c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2c50be95}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4f}]}, 0x2c}}, 0x800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac141424000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001133504d46c000000ffffffff000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x400003f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3]}}) 1.152688112s ago: executing program 5 (id=2167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xdffffffc}}}}}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) setitimer(0x2, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) capset(&(0x7f0000019340)={0x19980330}, &(0x7f0000000280)={0x0, 0x7, 0x40000000, 0x81, 0xffffffff, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000680)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) accept4$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) 1.073909838s ago: executing program 6 (id=2168): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000ffffc90000000000140000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.018405492s ago: executing program 38 (id=2168): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000ffffc90000000000140000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 912.034399ms ago: executing program 0 (id=2170): r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0x0, 0x2, 0xfd, 0x0, 0xffffffff, 0x41034, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1, 0x7fff}, 0x8000, 0xe6d, 0xd, 0x6, 0xdab, 0x6, 0x1, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x8, 0x6b, 0xff, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x200, 0xa783, 0x9, 0x8, 0x3, 0x7, 0x0, 0x0, 0xac, 0x0, 0x1}, r0, 0xb, r1, 0x0) ptrace$setopts(0x4200, r0, 0x4, 0x1) r2 = signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff8]}, 0x8, 0x400) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000180)={0x6, 0x2, 0x9, 0x4, 0x781}) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000200)=0x30) io_setup(0x4, &(0x7f0000000240)) listen(r2, 0xa21) ptrace(0x11, r0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000280)=[{{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}], 0x8) io_uring_setup(0x6891, &(0x7f00000002c0)={0x0, 0x6238, 0x2000, 0x3, 0x2a5, 0x0, r2}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x480, '\x00', 0x0, r2, 0x5, 0x4}, 0x50) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, {&(0x7f00000003c0)=""/95, 0x5f}, &(0x7f0000000440)}, 0xa0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x410301, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) r7 = pidfd_getfd(r6, r5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x8, 0x8001, {{0x1c, 0x4, 0x2, 0x2, 0x70, 0x66, 0x0, 0xd, 0x29, 0x0, @broadcast, @private=0xa010102, {[@lsrr={0x83, 0x7, 0x85, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x27, 0x5, [@loopback, @local, @remote, @loopback, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x78, 0x1, 0x0, [{@multicast2, 0xe384}, {@rand_addr=0x64010100, 0x3}, {@rand_addr=0x64010100, 0x1}, {@remote, 0xeb1}, {@empty, 0x3}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x1, 0x0}, 0x8) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%+9llu \x00'}, 0x20) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x40240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0x8, &(0x7f0000000680)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @jmp={0x5, 0x1, 0xd, 0x4, 0x0, 0xfffffffffffffffc, 0xc}], &(0x7f00000006c0)='syzkaller\x00', 0x401, 0xaa, &(0x7f0000000700)=""/170, 0x40f00, 0x14, '\x00', r9, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, r7, 0x9, &(0x7f0000000ac0)=[r6, r2, r11, r4, r12, r2, r2, r13, r4], &(0x7f0000000b00)=[{0x4, 0x2, 0x2, 0x6}, {0x5, 0x3, 0xc, 0x4}, {0x4, 0x4, 0xc, 0x9}, {0x3, 0x5, 0x5, 0x3}, {0x3, 0x4, 0x5, 0x4}, {0x1, 0x2, 0x1, 0x3}, {0x5, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x1, 0x9}, {0x5, 0x3, 0x2, 0x8}], 0x10, 0x4}, 0x94) socket(0x2a, 0x2, 0x6) mq_open(&(0x7f0000000c80)='/dev/nvram\x00', 0x80, 0xc, &(0x7f0000000cc0)={0x10001, 0x1, 0x7, 0xff}) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1b, 0x17, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x2000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000dc0)='syzkaller\x00', 0xcfc8, 0xc5, &(0x7f0000000e00)=""/197, 0x41000, 0x21, '\x00', 0x0, @fallback=0x20, r14, 0x8, &(0x7f0000000f40)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x8, 0x3, 0x228}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001000)=[r7], &(0x7f0000001040)=[{0x3, 0x4, 0x3, 0x5}, {0x1, 0x5, 0xf, 0x4}, {0x2, 0x2, 0x0, 0x13185211a2f6a12c}, {0x5, 0x5, 0x7fff, 0x1}, {0x3, 0x1, 0x4, 0x9}, {0x2, 0x5, 0xf, 0x1}, {0x1, 0x3, 0x10, 0x8}, {0x4, 0x3, 0x3, 0x9}], 0x10, 0x1000}, 0x94) 786.374237ms ago: executing program 0 (id=2171): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x40, &(0x7f0000000040)={@align=0xff, {0x6, 0x7, 0x10, 0x9}}, 0x100, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x4}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xb41) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x4}, &(0x7f0000000180)=0x8) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000001c0)=""/22) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x800, 0x70bd2b, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x440c5}, 0x40000) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000400)=[0x5, 0x8]) sendmsg$kcm(r0, &(0x7f0000001640)={&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="34a51db48bbefbb2216624999910f9db10ce50961e79a24c1e8cc3adc749601456330cbfc6ee12f8ea6f33bef8578be6b0cb65cae0efdd738f0a8e1318c25421142a8099354235e099e20b2ad8e4c1020a9d7d4bf32ccc57c2f556985aa9e25429d4a8a8c0d0314672738ffbf3084e185d6a8dc4d0ba06d76af05faa8fdf2a58bf943f72329bd0d86cf81b61f459c033279aec67106557c0bb1b99b29c0d9c3904127fb3870fa57d8f92cea0b9c45d275a7afb9570c6d595dc3f681ec6b6718edd2aaa5469bf9b10f77416bec57872", 0xcf}], 0x1, &(0x7f0000000600)=[{0x1010, 0x116, 0xff, "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"}], 0x1010}, 0x24044000) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000001680)={0xc, 0x2, 0x25b, 0x4, 0x3, "4a4a3dfd9c021ab6985547446ecdd49c6772e1"}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000016c0), r3) rmdir(&(0x7f0000001700)='./file0\x00') sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa6af}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x40090) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000001880)=0x1, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r3) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x820) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000001a00)='^\x00', &(0x7f0000001a40)='./file0\x00', 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b00)={0xf8, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x4c880) fcntl$getownex(r2, 0x10, &(0x7f0000001d00)={0x0, 0x0}) perf_event_open(&(0x7f0000001c80)={0x4, 0x80, 0x9, 0x90, 0x11, 0x9, 0x0, 0xf03e, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffff80000000}, 0x8, 0x1000, 0xe, 0x8, 0x7, 0xb, 0xca8, 0x0, 0x7}, r7, 0x9, 0xffffffffffffffff, 0x0) r8 = timerfd_create(0x4, 0x80000) timerfd_settime(r8, 0x3, &(0x7f0000001d40)={{}, {0x77359400}}, &(0x7f0000001d80)) sendto$l2tp6(r0, &(0x7f0000001dc0)="1c9c30c507f120a353f47535a619171ea0436732e72ec16edf138f682bcba166a636f21818419c66131cc81923f534f6e8cf6dce782ee706f5a2e284d6caf03ddaff84c89c619b02d55a68468a9c5fdc403758d75c1b37bafbb9d660693835fbd79c6a19354af041ba9620be1ea2aef89ad8647147882ed76e847c92c7a3e439647a450fc2511ff67639b4237a05dd89eadb1ed6ed50156f30f25b0964da3d5dd10d59ac015c38ba00979680ffe290dd51c605a86c62e88951ec75bc82ff", 0xbe, 0x44, 0x0, 0x0) r9 = creat(&(0x7f0000001e80)='./file0\x00', 0x36) sendmsg$NL80211_CMD_SET_MAC_ACL(r9, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xe8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x50}, 0x64004015) 761.252019ms ago: executing program 0 (id=2172): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x20000000, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f000000fcfffffffcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22e000000200000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 609.901679ms ago: executing program 0 (id=2173): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb, 0x2f0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000040c0)={0x1, 0x3, 0x0, 'queue1\x00', 0xdf3c}) syz_read_part_table(0x4062, &(0x7f0000000000)="$eJzszjFKA1EUBdCbiTFfCYJgJ4hBsJQprbKLbMDO3trCAfdgY2E5K3AjbsMtjExAGTBJY0CUc4rHcO+bzwu/bbK52tvYvE5znOR8NGrqOinfl6t+1M/TyWGpMkty1wfTz2Zl2e7gfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C8bD75v39Zt3JymuV/kepaUKsnDOKXPT5L51banu67rkmW765MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9usi583PLDy0WaxdkoJZlfDovSj2oQHK3m03uSg69wv/3pxQDABztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBXAAAA//9FPhJw") 320.419639ms ago: executing program 9 (id=2174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400e000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x2000c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x74094}, 0x40008c0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x101080}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x108, r4, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0xd9, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_b, @random="2b54972a3e20", {0x7, 0x4}}, 0xe, 0x20, @random=0x9, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x0, 0x0, {0xd7, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x6, 0xfd}}, [{0xdd, 0x4e, "4536988718824cc32c41e62db3314e1b25654ea78ae3d8ea6c51d26478cdf219549e3cde0e7f3a6e67342fdfe5fa38cf7df5ae173f86f73e40b242852c8d935c8260f87166d6ee1235cc0b86f9be"}, {0xdd, 0x49, "87a139bf3e0cf5710136af780665a8cb38c0a20f1d99f73a4800262a731fa1c72bc69a47f5319ef682bbdaa4ac59323de8e5390acc8e229fc95ee345c0203760ba284cdd8105fa214c"}]}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendfile(r3, r3, &(0x7f0000000540)=0x5, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x8001) r7 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x3ff, 0x111200) r8 = open_tree(r7, &(0x7f0000000700)='./file0\x00', 0x1000) getsockname$packet(r7, &(0x7f0000000740), &(0x7f0000000780)=0x14) prctl$PR_MCE_KILL(0x21, 0x62c149e9a1a8b5a1, 0x1) r9 = accept4$unix(r8, &(0x7f00000007c0), &(0x7f0000000840)=0x6e, 0x800) getsockname$unix(r9, &(0x7f0000000880)=@abs, &(0x7f0000000900)=0x6e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000940)=0xdf) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0/file0\x00', 0x2000, 0x120) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x1409, 0x800, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000045}, 0x4010) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000c40)={&(0x7f0000000c00)={&(0x7f0000000b00)="ef7612977f6bf89ab8a9df5341a617ba3ec13cf81059728ac9af818cb2008398329ce98a2d5f3a9c2b0cd328ee8f15232ce1d90d2772b027122c52896946c131ed8863c43a238a68b8333c178c26fb99b33b6a5abd967de21cf8547ba65e4a128e2cb8d990c68123281379b363dd6894c8b9933cfea2aeea3e47b2bd1445673ff5ac38628173d262d0f36fe865188d7d7a78c0de25d833f4d1d238c2abb4b1697a3a6e1fa20ad526e521410ac242fc3392e9d26716d39f793dd9c9d0fe962a36c6d61a6580b52d5ab72f4c12f293e47779019bd9948065eb348cf761daedb63d033be6f142ba", 0xe6, 0x1, 0x39, 0x1}, 0x1}, 0x1) recvmsg(r10, &(0x7f0000001340)={&(0x7f0000000c80)=@pppoe, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000d00)=""/29, 0x1d}, {&(0x7f0000000d40)=""/118, 0x76}, {&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/243, 0xf3}, {&(0x7f0000000fc0)=""/32, 0x20}, {&(0x7f0000001000)=""/114, 0x72}, {&(0x7f0000001080)=""/205, 0xcd}, {&(0x7f0000001180)}], 0x8, &(0x7f0000001240)=""/224, 0xe0}, 0x121) io_setup(0x30bf, &(0x7f0000001380)) sendmsg$nl_xfrm(r7, &(0x7f00000015c0)={&(0x7f00000013c0), 0xc, &(0x7f0000001580)={&(0x7f0000001440)=@allocspi={0x12c, 0x16, 0x10, 0x70bd28, 0x25dfdbfd, {{{@in=@loopback, @in=@private=0xa010101, 0x4e22, 0x0, 0x4e20, 0x0, 0x8203f5cbe6f8a86b, 0x80, 0x20, 0x2b}, {@in=@rand_addr=0x64010102, 0x4d3, 0x2b}, @in=@rand_addr=0x64010101, {0xf, 0x400, 0x1c00000000000000, 0x800, 0x5, 0x7b, 0xabc, 0x61}, {0x101, 0xbe, 0x3, 0x7fffffff}, {0xff, 0x10, 0x2}, 0x70bd28, 0x3501, 0x2, 0x3, 0x9, 0x29}, 0x7, 0xb}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@private1, 0x0, 0xa}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) 292.239311ms ago: executing program 0 (id=2175): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x12, 0x4, 0x2, 0x2a, 0x48, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x56, [@rand_addr=0x64010101, @loopback, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}]}}}}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) unshare(0x6a040000) 222.064515ms ago: executing program 5 (id=2176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="040100001a0007002abd70000000000000000000000000000000000000000000e0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa200000000000000000000000000000002b000000fc000000000000000000003000000000060000000020000000b4000000000000ffffffffffffffff010000007ffffffe00000000000000000b0006000000000000000000ffffffffffffff8000000000000000000000000000002000000000000700000000000000ac6138ca3637c61f70ba34cb00000000e80a0000000000f9ff0000000a000200100000000000000014000e"], 0x104}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 217.865536ms ago: executing program 5 (id=2177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000032000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000006000008000000080000fcffffff0a010102000000000000000000000000000000003200000000000000000000060000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 203.899307ms ago: executing program 5 (id=2178): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000012000000000000140000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 164.027359ms ago: executing program 5 (id=2179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="42dc64e03772dac70e77be6bf791351a21813c3037a88eeea1cdca9529bd75105e74e0ce2afcdcf270ce32db807cbf2f8dfe5a58d99ee363e7622e808b"], 0x7c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x8850}, 0x4040) (async, rerun: 64) r1 = open(&(0x7f0000000100)='./bus\x00', 0x6c840, 0x50) truncate(&(0x7f0000000000)='./bus\x00', 0x86) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r2, 0xffffffffffffff7f, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x59d228759eccae3d, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c840}, 0x40) (async, rerun: 64) finit_module(r1, 0x0, 0x5) (rerun: 64) close(0x3) 920.3µs ago: executing program 5 (id=2180): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x0, 0x3, {{0x7, 0x4, 0x2, 0x3d, 0x1c, 0x65, 0x0, 0x10, 0x4, 0x0, @local, @private=0xa010102, {[@generic={0x83, 0x2}, @lsrr={0x83, 0x3, 0xa1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a000105fe1900ffffdbdf25000000000000000008000500eef1c8c0"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90002000ad9000008000240000000000900010073797a30000000000900020073797a320000000014000580080001"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x8010, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) unlink(0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000093a3d5242273fa4c6060d7c47945b856e7d58674286bfa84c11fbf5b2299d6f0658d66db5af19e465163f0058112ed9904f52f76fb4b5267da00d5e66435f546aa3798748fbd20b1e8a8c2a01abfdc3492e69ba40e3d0aa256229206813d28401fb9ffc38fbf7443e4b2c30ecbd48b670bcf380650625c5e91aa37669e740963aeab4373369ef7e12a06df80e24b51c9fabaea7b0ec4c3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000007c0)="0593672aa539b405ffc82b94bdd736185e328ea73bd9405585a69681615c04f9ad0e39625ee9b428d6ff9fcd3b1f7608954edec1363f9a3d66addcbe25c2d74fede236afb73ff82b41fa68ff3f501412555651c32f2b331921cc3a99be57e3f9eb8ae0f91578a22af64049e45365c2e319077c4218fe98ff322b44833986f5e0060a80b160caad6f55e061cecea87d085194c4a9175a143484034ced3b339c929ea0755fa4112ea43c5f45b4714f32b3a0ad4945f4a8c6dbb55e2ccb67a1dcfc130592ab9651643cb3ff67e941326ec1", 0xd0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1, 0x9, 0x6, 0x8e, 0xf}}) r8 = socket(0x200000000000011, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 9 (id=2181): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)='\"', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2c00) shutdown(r1, 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) kernel console output (not intermixed with test programs): x7fffffff) [ 294.267046][ T28] audit: type=1326 audit(1775737167.252:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 294.290729][ T28] audit: type=1326 audit(1775737167.252:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 294.321598][ T28] audit: type=1326 audit(1775737167.252:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 295.234654][ T9836] netlink: 'syz.6.1518': attribute type 1 has an invalid length. [ 295.299538][ T28] audit: type=1326 audit(1775737167.252:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 295.323319][ T28] audit: type=1326 audit(1775737167.252:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 296.205119][ T9843] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1518'. [ 296.218245][ T9842] loop2: detected capacity change from 0 to 512 [ 296.243550][ T9836] bond3: entered promiscuous mode [ 296.480309][ T9836] bond3: entered allmulticast mode [ 296.485587][ T9836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.841964][ T9842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.862878][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.891468][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.839262][ T9857] loop6: detected capacity change from 0 to 764 [ 299.876220][ T9857] iso9660: Unknown parameter 'f~ߪ8Vnojoliet' [ 300.602410][ T9868] loop9: detected capacity change from 0 to 512 [ 300.751814][ T9868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.793096][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.054312][ T9875] netlink: 'syz.6.1527': attribute type 21 has an invalid length. [ 301.093945][ T9875] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1527'. [ 301.116220][ T9865] vlan2: entered promiscuous mode [ 301.121415][ T9865] syz_tun: entered promiscuous mode [ 301.296764][ T9864] loop5: detected capacity change from 0 to 8192 [ 301.326711][ T9879] syzkaller0: entered promiscuous mode [ 301.349319][ T9879] syzkaller0: entered allmulticast mode [ 301.372318][ T3626] loop5: p1 < > p2 p4 < p5 > [ 301.379553][ T3626] loop5: partition table partially beyond EOD, truncated [ 301.400061][ T3626] loop5: p1 start 134217728 is beyond EOD, truncated [ 301.415952][ T3626] loop5: p2 size 591360 extends beyond EOD, truncated [ 301.521090][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 301.538639][ T3626] loop5: p5 size 591360 extends beyond EOD, truncated [ 301.626142][ T9864] loop5: p1 < > p2 p4 < p5 > [ 301.631423][ T9882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.656176][ T9864] loop5: partition table partially beyond EOD, truncated [ 301.700571][ T9864] loop5: p1 start 134217728 is beyond EOD, truncated [ 301.714933][ T9864] loop5: p2 size 591360 extends beyond EOD, truncated [ 301.728859][ T9895] loop0: detected capacity change from 0 to 512 [ 301.738313][ T9864] loop5: p5 size 591360 extends beyond EOD, truncated [ 301.777400][ T9896] loop6: detected capacity change from 0 to 512 [ 301.827429][ T9896] ------------[ cut here ]------------ [ 301.833319][ T9896] EA inode 11 i_nlink=2 [ 301.833440][ T9896] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.6.1531/9896 [ 301.849090][ T9896] Modules linked in: [ 301.853731][ T9896] CPU: 0 UID: 0 PID: 9896 Comm: syz.6.1531 Not tainted syzkaller #0 PREEMPT(full) [ 301.863779][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 301.874641][ T9896] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 301.881530][ T9896] Code: 54 33 99 ff 4c 8d 2d 9d a5 5d 05 49 8d 7e 40 e8 94 cc b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 c7 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f e8 dd 03 66 66 66 66 66 66 2e [ 301.902289][ T9896] RSP: 0018:ffffc90003987778 EFLAGS: 00010246 [ 301.908740][ T9896] RAX: ffff88810212cdc8 RBX: ffff88811b05dbe8 RCX: ffffffff81c02778 [ 301.917081][ T9896] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 301.925440][ T9896] RBP: 000000000000000b R08: 000188811b05db9b R09: 0000000000000000 [ 301.934328][ T9896] R10: ffffc900039876a8 R11: 0001c900039876a8 R12: ffff88811b05db98 [ 301.942796][ T9896] R13: ffffffff871dcd00 R14: ffff88811b05db50 R15: 0000000000000001 [ 301.951229][ T9896] FS: 00007fb4f153e6c0(0000) GS:ffff8882ae8d7000(0000) knlGS:0000000000000000 [ 301.960470][ T9896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.967658][ T9896] CR2: 0000000034747865 CR3: 0000000128cc6000 CR4: 00000000003506f0 [ 301.976281][ T9896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.984850][ T9896] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 301.993580][ T9896] Call Trace: [ 301.997140][ T9896] [ 302.000518][ T9896] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 302.007211][ T9896] ? errseq_check+0x2c/0x50 [ 302.012256][ T9896] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 302.018271][ T9896] ? ext4_truncate+0x92b/0xb00 [ 302.023400][ T9896] ext4_evict_inode+0xac1/0xe40 [ 302.028743][ T9896] ? __pfx_ext4_evict_inode+0x10/0x10 [ 302.034250][ T9896] evict+0x2af/0x510 [ 302.038930][ T9896] ? __dquot_initialize+0x146/0x7c0 [ 302.044590][ T9896] iput+0x41a/0x580 [ 302.049000][ T9896] ext4_process_orphan+0x1a9/0x1c0 [ 302.054830][ T9896] ext4_orphan_cleanup+0x6a8/0xa00 [ 302.061320][ T9896] ext4_fill_super+0x3414/0x37c0 [ 302.068431][ T9896] ? set_blocksize+0x14c/0x270 [ 302.073869][ T9896] ? setup_bdev_super+0x30e/0x370 [ 302.079720][ T9896] ? __pfx_ext4_fill_super+0x10/0x10 [ 302.085360][ T9896] get_tree_bdev_flags+0x291/0x300 [ 302.090730][ T9896] ? __pfx_ext4_fill_super+0x10/0x10 [ 302.099343][ T9895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.099407][ T9895] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.131040][ T9896] get_tree_bdev+0x1f/0x30 [ 302.136094][ T9896] ext4_get_tree+0x1c/0x30 [ 302.140877][ T9896] vfs_get_tree+0x57/0x1d0 [ 302.146040][ T9896] do_new_mount+0x288/0x8d0 [ 302.150889][ T9896] path_mount+0x4d0/0xbc0 [ 302.155832][ T9896] __se_sys_mount+0x28c/0x2e0 [ 302.161240][ T9896] __x64_sys_mount+0x67/0x80 [ 302.166601][ T9896] x64_sys_call+0x2d61/0x3020 [ 302.171684][ T9896] do_syscall_64+0x12c/0x370 [ 302.176888][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.183360][ T9896] RIP: 0033:0x7fb4f2b0da8a [ 302.188561][ T9896] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.208861][ T9896] RSP: 002b:00007fb4f153de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.218659][ T9896] RAX: ffffffffffffffda RBX: 00007fb4f153dee0 RCX: 00007fb4f2b0da8a [ 302.227468][ T9896] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fb4f153dea0 [ 302.236290][ T9896] RBP: 00002000000009c0 R08: 00007fb4f153dee0 R09: 0000000000800718 [ 302.245110][ T9896] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 302.255830][ T9896] R13: 00007fb4f153dea0 R14: 000000000000048d R15: 0000200000000380 [ 302.266061][ T9896] [ 302.269311][ T9896] ---[ end trace 0000000000000000 ]--- [ 302.272628][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 302.276829][ T9896] EXT4-fs (loop6): 1 orphan inode deleted [ 302.286215][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.294580][ T9896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.301601][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 302.340348][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 302.351080][ T9888] lo speed is unknown, defaulting to 1000 [ 302.358517][ T9888] lo speed is unknown, defaulting to 1000 [ 302.364574][ T9888] lo speed is unknown, defaulting to 1000 [ 302.381520][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 302.381603][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 302.393925][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 302.432902][ T9888] infiniband lyz2: set down [ 302.437721][ T5096] lo speed is unknown, defaulting to 1000 [ 302.444014][ T9888] infiniband lyz2: added lo [ 302.458736][ T9888] RDS/IB: lyz2: added [ 302.462982][ T9888] smc: adding ib device lyz2 with port count 1 [ 302.469571][ T9888] smc: ib device lyz2 port 1 has no pnetid [ 302.475864][ T5096] lo speed is unknown, defaulting to 1000 [ 302.482164][ T9888] lo speed is unknown, defaulting to 1000 [ 302.531929][ T9888] lo speed is unknown, defaulting to 1000 [ 302.641123][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.653141][ T9888] lo speed is unknown, defaulting to 1000 [ 302.748615][ T9920] loop5: detected capacity change from 0 to 128 [ 302.756098][ T9920] msdos: Bad value for 'gid' [ 302.760762][ T9920] msdos: Bad value for 'gid' [ 303.008272][ T9888] lo speed is unknown, defaulting to 1000 [ 303.187958][ T9888] lo speed is unknown, defaulting to 1000 [ 303.544841][ T9926] loop2: detected capacity change from 0 to 512 [ 303.563074][ T9926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.594126][ T9926] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.608493][ T9923] syzkaller0: entered promiscuous mode [ 303.614468][ T9923] syzkaller0: entered allmulticast mode [ 303.621794][ T9926] EXT4-fs (loop2): shut down requested (2) [ 303.681079][ T9926] xfrm0 speed is unknown, defaulting to 1000 [ 303.727081][ T9926] lo speed is unknown, defaulting to 1000 [ 303.803186][ T9932] veth0_to_hsr: entered promiscuous mode [ 303.818051][ T9932] veth0_to_hsr: entered allmulticast mode [ 303.884002][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 303.884018][ T28] audit: type=1400 audit(1775737177.912:3051): avc: denied { firmware_load } for pid=9931 comm="syz.9.1544" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 303.993841][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.348369][ T9945] loop5: detected capacity change from 0 to 512 [ 304.395073][ T9945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.418044][ T9945] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.550347][ T9959] loop2: detected capacity change from 0 to 1024 [ 304.557287][ T9959] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 304.583071][ T9962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1554'. [ 304.621873][ T9962] bridge1: entered promiscuous mode [ 304.627250][ T9962] bridge1: entered allmulticast mode [ 304.665281][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.827122][ T9970] syzkaller0: entered promiscuous mode [ 304.841460][ T9970] syzkaller0: entered allmulticast mode [ 304.922991][ T28] audit: type=1400 audit(1775737178.952:3052): avc: denied { create } for pid=9971 comm="syz.6.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 304.948390][ T9959] loop2: detected capacity change from 0 to 4096 [ 304.968131][ T9959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.062942][ T28] audit: type=1400 audit(1775737179.092:3053): avc: denied { ioctl } for pid=9977 comm="syz.6.1559" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 305.267211][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.304498][ T9986] loop0: detected capacity change from 0 to 128 [ 305.311922][ T9986] msdos: Bad value for 'gid' [ 305.316785][ T9986] msdos: Bad value for 'gid' [ 306.130109][ T9995] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1561'. [ 306.178430][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.273114][T10000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.292006][T10000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.360405][T10000] loop5: detected capacity change from 0 to 4096 [ 306.380018][T10000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.402662][T10000] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 306.426446][T10000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.677248][T10006] loop9: detected capacity change from 0 to 1024 [ 306.816944][T10012] loop9: detected capacity change from 0 to 512 [ 306.828129][ T28] audit: type=1326 audit(1775737180.862:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 306.852023][ T28] audit: type=1326 audit(1775737180.862:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 306.857705][T10012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.890274][T10012] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.914804][ T28] audit: type=1326 audit(1775737180.862:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 307.311082][ T28] audit: type=1400 audit(1775737181.342:3057): avc: denied { ioctl } for pid=10049 comm="syz.0.1584" path="socket:[27728]" dev="sockfs" ino=27728 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.349517][ T28] audit: type=1400 audit(1775737181.372:3058): avc: denied { getopt } for pid=10049 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.371487][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.422792][T10059] loop0: detected capacity change from 0 to 128 [ 307.434105][T10059] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.447256][T10059] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 307.523186][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.624206][T10081] xfrm0 speed is unknown, defaulting to 1000 [ 307.685952][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.689849][T10081] lo speed is unknown, defaulting to 1000 [ 307.749072][T10077] infiniband syz0: set active [ 307.754205][T10077] infiniband syz0: added veth0_vlan [ 307.782556][T10077] RDS/IB: syz0: added [ 307.795217][T10077] smc: adding ib device syz0 with port count 1 [ 307.801961][T10077] smc: ib device syz0 port 1 has no pnetid [ 307.814244][T10086] tipc: Enabling of bearer rejected, failed to enable media [ 307.874629][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 307.896106][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 307.928751][T10103] loop0: detected capacity change from 0 to 512 [ 307.939617][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 307.956889][T10105] FAULT_INJECTION: forcing a failure. [ 307.956889][T10105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.970762][T10105] CPU: 0 UID: 0 PID: 10105 Comm: syz.2.1603 Tainted: G W syzkaller #0 PREEMPT(full) [ 307.970794][T10105] Tainted: [W]=WARN [ 307.970801][T10105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 307.970844][T10105] Call Trace: [ 307.970903][T10105] [ 307.970922][T10105] __dump_stack+0x1d/0x30 [ 307.970951][T10105] dump_stack_lvl+0x95/0xd0 [ 307.971022][T10105] dump_stack+0x15/0x1b [ 307.971041][T10105] should_fail_ex+0x263/0x280 [ 307.971064][T10105] should_fail+0xb/0x20 [ 307.971124][T10105] should_fail_usercopy+0x1a/0x20 [ 307.971147][T10105] _copy_from_user+0x1c/0xb0 [ 307.971219][T10105] __sys_sendto+0x1ca/0x490 [ 307.971258][T10105] __x64_sys_sendto+0x76/0x90 [ 307.971356][T10105] x64_sys_call+0x2d35/0x3020 [ 307.971388][T10105] do_syscall_64+0x12c/0x370 [ 307.971479][T10105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.971497][T10105] RIP: 0033:0x7f2b8f90c819 [ 307.971555][T10105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.971574][T10105] RSP: 002b:00007f2b8e367028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 307.971596][T10105] RAX: ffffffffffffffda RBX: 00007f2b8fb85fa0 RCX: 00007f2b8f90c819 [ 307.971611][T10105] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005 [ 307.971626][T10105] RBP: 00007f2b8e367090 R08: 0000200000000140 R09: 000000000000001c [ 307.971661][T10105] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 307.971673][T10105] R13: 00007f2b8fb86038 R14: 00007f2b8fb85fa0 R15: 00007ffd22ef8908 [ 307.971690][T10105] [ 307.987110][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 308.044924][T10103] EXT4-fs (loop0): 1 truncate cleaned up [ 308.149676][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 308.165239][T10103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.186565][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 308.205909][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 308.230845][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 308.256167][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 308.267341][T10099] netlink: 'syz.9.1601': attribute type 46 has an invalid length. [ 308.335898][ T28] audit: type=1400 audit(1775737182.352:3059): avc: denied { rename } for pid=10102 comm="syz.0.1602" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 308.374717][T10117] xfrm0 speed is unknown, defaulting to 1000 [ 308.411416][T10117] lo speed is unknown, defaulting to 1000 [ 308.484216][T10121] loop9: detected capacity change from 0 to 512 [ 308.505687][T10121] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.509237][T10117] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=10117 comm=syz.2.1608 [ 308.624381][T10121] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.661100][T10128] loop5: detected capacity change from 0 to 512 [ 308.677904][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.794129][T10128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.845031][T10128] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.935666][T10147] FAULT_INJECTION: forcing a failure. [ 309.935666][T10147] name failslab, interval 1, probability 0, space 0, times 0 [ 309.968353][T10148] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1617'. [ 309.980604][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.018391][T10147] CPU: 1 UID: 0 PID: 10147 Comm: syz.0.1618 Tainted: G W syzkaller #0 PREEMPT(full) [ 310.018427][T10147] Tainted: [W]=WARN [ 310.018434][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.018447][T10147] Call Trace: [ 310.018510][T10147] [ 310.018517][T10147] __dump_stack+0x1d/0x30 [ 310.018543][T10147] dump_stack_lvl+0x95/0xd0 [ 310.018606][T10147] dump_stack+0x15/0x1b [ 310.018629][T10147] should_fail_ex+0x263/0x280 [ 310.018657][T10147] ? tcp_sendmsg_fastopen+0x172/0x520 [ 310.018684][T10147] should_failslab+0x8c/0xb0 [ 310.018702][T10147] __kmalloc_cache_noprof+0x5f/0x410 [ 310.018725][T10147] tcp_sendmsg_fastopen+0x172/0x520 [ 310.018820][T10147] tcp_sendmsg_locked+0x2939/0x2de0 [ 310.018846][T10147] ? __rcu_read_unlock+0x4e/0x70 [ 310.018930][T10147] ? terminate_walk+0x1e6/0x210 [ 310.018965][T10147] ? path_openat+0x1ab2/0x2050 [ 310.018981][T10147] ? path_openat+0x1b01/0x2050 [ 310.018996][T10147] ? __rcu_read_unlock+0x4e/0x70 [ 310.019018][T10147] ? avc_has_perm_noaudit+0xab/0x130 [ 310.019062][T10147] ? avc_has_perm+0x101/0x190 [ 310.019118][T10147] ? _raw_spin_lock_bh+0x56/0xb0 [ 310.019150][T10147] ? __pfx_tcp_sendmsg+0x10/0x10 [ 310.019172][T10147] ? __pfx_inet6_sendmsg+0x10/0x10 [ 310.019253][T10147] tcp_sendmsg+0x2f/0x50 [ 310.019300][T10147] inet6_sendmsg+0x76/0xd0 [ 310.019319][T10147] __sys_sendto+0x325/0x490 [ 310.019359][T10147] __x64_sys_sendto+0x76/0x90 [ 310.019389][T10147] x64_sys_call+0x2d35/0x3020 [ 310.019416][T10147] do_syscall_64+0x12c/0x370 [ 310.019441][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.019478][T10147] RIP: 0033:0x7fc9a30dc819 [ 310.019492][T10147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.019507][T10147] RSP: 002b:00007fc9a1b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 310.019589][T10147] RAX: ffffffffffffffda RBX: 00007fc9a3355fa0 RCX: 00007fc9a30dc819 [ 310.019600][T10147] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005 [ 310.019611][T10147] RBP: 00007fc9a1b37090 R08: 0000200000000140 R09: 000000000000001c [ 310.019623][T10147] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 310.019635][T10147] R13: 00007fc9a3356038 R14: 00007fc9a3355fa0 R15: 00007fff5229bbc8 [ 310.019656][T10147] [ 310.318655][T10150] loop0: detected capacity change from 0 to 512 [ 310.378599][T10152] loop6: detected capacity change from 0 to 512 [ 310.540539][T10152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.565963][T10152] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.594340][T10152] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1621: bg 0: block 217: padding at end of block bitmap is not set [ 310.635942][ T28] audit: type=1400 audit(1775737184.652:3060): avc: denied { append } for pid=10156 comm="syz.0.1622" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 310.664540][T10158] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1621: bg 0: block 217: padding at end of block bitmap is not set [ 310.701025][T10158] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 310.720154][ T28] audit: type=1400 audit(1775737184.652:3061): avc: denied { write } for pid=10156 comm="syz.0.1622" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 310.768511][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.851318][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.917601][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1625'. [ 310.950945][T10164] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 310.952856][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1619'. [ 310.980886][T10162] loop9: detected capacity change from 0 to 764 [ 310.987897][ T28] audit: type=1400 audit(1775737185.022:3062): avc: denied { ioctl } for pid=10163 comm="syz.0.1626" path="socket:[27062]" dev="sockfs" ino=27062 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.048531][T10162] ISOFS: unable to read i-node block [ 311.159056][T10182] loop0: detected capacity change from 0 to 512 [ 311.167861][T10182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.181017][T10182] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.351244][T10185] loop6: detected capacity change from 0 to 128 [ 311.358962][T10185] msdos: Bad value for 'gid' [ 311.363682][T10185] msdos: Bad value for 'gid' [ 312.115370][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.363689][T10200] FAULT_INJECTION: forcing a failure. [ 312.363689][T10200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.386188][T10200] CPU: 1 UID: 0 PID: 10200 Comm: syz.0.1633 Tainted: G W syzkaller #0 PREEMPT(full) [ 312.386272][T10200] Tainted: [W]=WARN [ 312.386279][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.386303][T10200] Call Trace: [ 312.386310][T10200] [ 312.386318][T10200] __dump_stack+0x1d/0x30 [ 312.386346][T10200] dump_stack_lvl+0x95/0xd0 [ 312.386370][T10200] dump_stack+0x15/0x1b [ 312.386425][T10200] should_fail_ex+0x263/0x280 [ 312.386509][T10200] should_fail+0xb/0x20 [ 312.386533][T10200] should_fail_usercopy+0x1a/0x20 [ 312.386561][T10200] _copy_to_user+0x20/0xa0 [ 312.386671][T10200] simple_read_from_buffer+0xb5/0x130 [ 312.386697][T10200] proc_fail_nth_read+0x10e/0x150 [ 312.386732][T10200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.386763][T10200] vfs_read+0x1ab/0x7f0 [ 312.386887][T10200] ? __rcu_read_unlock+0x4e/0x70 [ 312.386963][T10200] ? __fget_files+0x184/0x1c0 [ 312.387064][T10200] ? mutex_lock+0x57/0x90 [ 312.387086][T10200] ksys_read+0xdc/0x1a0 [ 312.387113][T10200] __x64_sys_read+0x40/0x50 [ 312.387133][T10200] x64_sys_call+0x2886/0x3020 [ 312.387159][T10200] do_syscall_64+0x12c/0x370 [ 312.387235][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.387258][T10200] RIP: 0033:0x7fc9a309d04e [ 312.387274][T10200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.387347][T10200] RSP: 002b:00007fc9a1b36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.387365][T10200] RAX: ffffffffffffffda RBX: 00007fc9a1b376c0 RCX: 00007fc9a309d04e [ 312.387424][T10200] RDX: 000000000000000f RSI: 00007fc9a1b370a0 RDI: 0000000000000006 [ 312.387435][T10200] RBP: 00007fc9a1b37090 R08: 0000000000000000 R09: 0000000000000000 [ 312.387514][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.387522][T10200] R13: 00007fc9a3356038 R14: 00007fc9a3355fa0 R15: 00007fff5229bbc8 [ 312.387533][T10200] [ 312.391604][T10195] loop2: detected capacity change from 0 to 512 [ 313.371085][T10195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.387691][T10195] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.997246][T10203] sctp: [Deprecated]: syz.9.1636 (pid 10203) Use of int in max_burst socket option. [ 313.997246][T10203] Use struct sctp_assoc_value instead [ 314.334994][T10195] validate_nla: 55 callbacks suppressed [ 314.335014][T10195] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 314.359763][T10195] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.369171][T10195] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1635'. [ 314.954003][T10222] program syz.9.1641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.973369][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.176942][T10226] loop2: detected capacity change from 0 to 4096 [ 315.206958][T10226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.303475][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.320639][T10235] loop0: detected capacity change from 0 to 512 [ 315.353993][T10235] EXT4-fs: Ignoring removed bh option [ 315.364923][T10237] loop5: detected capacity change from 0 to 512 [ 315.384107][T10235] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 315.405120][T10235] EXT4-fs (loop0): 1 truncate cleaned up [ 315.420878][T10237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.445525][T10235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.471804][T10237] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.501140][T10235] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1645: bg 0: block 465: padding at end of block bitmap is not set [ 315.587589][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.617941][ T28] audit: type=1400 audit(1775737189.572:3063): avc: denied { lock } for pid=10246 comm="syz.6.1649" path="socket:[27219]" dev="sockfs" ino=27219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 315.666730][T10247] xfrm0 speed is unknown, defaulting to 1000 [ 315.710497][T10257] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.734541][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 315.748872][T10259] loop9: detected capacity change from 0 to 512 [ 315.750522][T10247] lo speed is unknown, defaulting to 1000 [ 315.772363][T10259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.788817][ T28] audit: type=1400 audit(1775737189.822:3064): avc: denied { name_bind } for pid=10261 comm="syz.2.1654" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 315.819464][T10259] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.161632][T10269] loop0: detected capacity change from 0 to 512 [ 316.182876][T10269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.291153][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.331724][T10269] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.357064][T10269] xt_hashlimit: size too large, truncated to 1048576 [ 316.458665][T10272] loop6: detected capacity change from 0 to 512 [ 316.470601][T10272] EXT4-fs: Ignoring removed bh option [ 316.476092][T10272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.505866][T10272] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 316.512184][T10278] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1656'. [ 316.533288][T10272] EXT4-fs (loop6): 1 truncate cleaned up [ 316.551694][T10272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.594229][T10276] loop5: detected capacity change from 0 to 4096 [ 316.608934][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.619781][T10276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.636085][T10272] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 316.737009][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.760074][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.792446][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.916108][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 317.156317][T10317] loop2: detected capacity change from 0 to 512 [ 317.168486][T10316] loop0: detected capacity change from 0 to 512 [ 317.212849][T10317] EXT4-fs: Ignoring removed oldalloc option [ 317.237957][T10316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.293355][T10317] EXT4-fs: Ignoring removed orlov option [ 317.352005][T10316] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.374762][T10317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.491969][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 317.666740][T10322] loop2: detected capacity change from 0 to 128 [ 317.673499][T10322] msdos: Bad value for 'gid' [ 317.678220][T10322] msdos: Bad value for 'gid' [ 317.851867][ T9] hid_parser_main: 188 callbacks suppressed [ 317.851886][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 317.916449][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.998560][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.114825][T10338] loop5: detected capacity change from 0 to 512 [ 318.279022][T10338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.375907][ T28] audit: type=1400 audit(1775737192.372:3065): avc: denied { create } for pid=10331 comm="syz.6.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 318.445446][T10341] loop0: detected capacity change from 0 to 4096 [ 318.697487][T10341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.996596][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.084461][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.293353][T10365] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 320.322835][T10369] netlink: 'syz.6.1686': attribute type 12 has an invalid length. [ 320.358146][T10373] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1683'. [ 321.281240][ T28] audit: type=1400 audit(1775737194.462:3066): avc: denied { sys_admin } for pid=10360 comm="syz.5.1683" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 321.311507][T10365] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1684: iget: bogus i_mode (2) [ 321.322865][T10365] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 321.323557][T10367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.335806][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 321.352426][ C1] EXT4-fs (loop2): initial error at time 1775737195: ext4_orphan_get:1397: inode 15 [ 321.362391][ C1] EXT4-fs (loop2): last error at time 1775737195: ext4_orphan_get:1397: inode 15 [ 321.372269][T10367] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.971005][T10384] netlink: 'syz.6.1689': attribute type 10 has an invalid length. [ 321.994376][T10384] team0: Port device dummy0 added [ 322.000544][T10384] netlink: 'syz.6.1689': attribute type 10 has an invalid length. [ 322.011380][T10384] team0: Port device dummy0 removed [ 322.019386][T10384] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 322.070755][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.108717][T10365] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1684: couldn't read orphan inode 15 (err -117) [ 322.142015][T10365] loop2: lost filesystem error report for type 5 error -117 [ 322.196411][T10365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.227087][T10396] netlink: 'syz.6.1692': attribute type 27 has an invalid length. [ 322.263046][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.280102][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1692'. [ 322.392120][T10407] set_capacity_and_notify: 2 callbacks suppressed [ 322.392282][T10407] loop9: detected capacity change from 0 to 512 [ 322.472194][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1699'. [ 322.490389][T10396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.524618][T10407] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.657433][T10396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.854011][T10396] veth1_vlan: left allmulticast mode [ 322.873440][T10421] loop0: detected capacity change from 0 to 512 [ 322.887894][T10396] macvlan1: left allmulticast mode [ 322.906534][T10421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.040948][T10421] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.096272][T10396] bond3: left promiscuous mode [ 323.101143][T10396] bond3: left allmulticast mode [ 323.363393][ T5796] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.372727][ T5092] syz0: Port: 1 Link DOWN [ 323.429318][ T5796] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.527042][ T5796] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.599782][ T5796] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.724978][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.803784][T10437] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1705'. [ 323.889900][T10434] syzkaller0: entered promiscuous mode [ 323.913331][T10434] syzkaller0: entered allmulticast mode [ 323.950891][ T28] audit: type=1400 audit(1775737197.982:3067): avc: denied { relabelfrom } for pid=10433 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 323.987548][T10432] xfrm0 speed is unknown, defaulting to 1000 [ 324.040805][ T28] audit: type=1400 audit(1775737197.982:3068): avc: denied { relabelto } for pid=10433 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 324.141770][T10441] loop2: detected capacity change from 0 to 128 [ 324.152679][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.154334][T10432] lo speed is unknown, defaulting to 1000 [ 324.191383][T10445] loop6: detected capacity change from 0 to 256 [ 324.264363][T10441] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.313005][T10441] ext4 filesystem being mounted at /360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 324.405986][T10461] loop9: detected capacity change from 0 to 512 [ 324.425512][ T28] audit: type=1400 audit(1775737198.452:3069): avc: denied { rename } for pid=10440 comm="syz.2.1708" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 324.494581][ T28] audit: type=1400 audit(1775737198.502:3070): avc: denied { getopt } for pid=10462 comm="syz.5.1715" lport=22243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.518924][T10468] FAULT_INJECTION: forcing a failure. [ 324.518924][T10468] name failslab, interval 1, probability 0, space 0, times 0 [ 324.532853][T10461] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.1714: inode has both inline data and extents flags [ 324.552743][T10468] CPU: 0 UID: 0 PID: 10468 Comm: syz.5.1716 Tainted: G W syzkaller #0 PREEMPT(full) [ 324.552774][T10468] Tainted: [W]=WARN [ 324.552780][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 324.552796][T10468] Call Trace: [ 324.552803][T10468] [ 324.552810][T10468] __dump_stack+0x1d/0x30 [ 324.552835][T10468] dump_stack_lvl+0x95/0xd0 [ 324.552855][T10468] dump_stack+0x15/0x1b [ 324.552873][T10468] should_fail_ex+0x263/0x280 [ 324.552917][T10468] should_failslab+0x8c/0xb0 [ 324.552939][T10468] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 324.552963][T10468] ? __alloc_skb+0x2d6/0x690 [ 324.552990][T10468] __alloc_skb+0x2d6/0x690 [ 324.553051][T10468] ? __alloc_skb+0x200/0x690 [ 324.553078][T10468] netlink_alloc_large_skb+0xbf/0xf0 [ 324.553179][T10468] netlink_sendmsg+0x40c/0x6f0 [ 324.553278][T10468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.553299][T10468] ____sys_sendmsg+0x563/0x5b0 [ 324.553321][T10468] ___sys_sendmsg+0x195/0x1e0 [ 324.553400][T10468] __x64_sys_sendmsg+0xd4/0x160 [ 324.553422][T10468] x64_sys_call+0x194c/0x3020 [ 324.553449][T10468] do_syscall_64+0x12c/0x370 [ 324.553580][T10468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.553602][T10468] RIP: 0033:0x7f1f5abac819 [ 324.553624][T10468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.553641][T10468] RSP: 002b:00007f1f59607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.553690][T10468] RAX: ffffffffffffffda RBX: 00007f1f5ae25fa0 RCX: 00007f1f5abac819 [ 324.553705][T10468] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000004 [ 324.553719][T10468] RBP: 00007f1f59607090 R08: 0000000000000000 R09: 0000000000000000 [ 324.553732][T10468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.553746][T10468] R13: 00007f1f5ae26038 R14: 00007f1f5ae25fa0 R15: 00007fffb4178c48 [ 324.553766][T10468] [ 324.554369][T10461] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 324.558511][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.575862][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 324.731170][T10457] syzkaller0: entered promiscuous mode [ 324.739048][ C0] EXT4-fs (loop9): initial error at time 1775737198: ext4_orphan_get:1397: inode 15 [ 324.739085][ C0] EXT4-fs (loop9): last error at time 1775737198: ext4_orphan_get:1397: inode 15 [ 324.747427][T10461] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.1714: couldn't read orphan inode 15 (err -117) [ 324.747507][T10461] loop9: lost filesystem error report for type 5 error -117 [ 324.748991][T10461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.769038][T10457] syzkaller0: entered allmulticast mode [ 324.798258][ T28] audit: type=1400 audit(1775737198.832:3071): avc: denied { setattr } for pid=10460 comm="syz.9.1714" name="file0" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 324.974674][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.071450][T10486] sctp: [Deprecated]: syz.6.1723 (pid 10486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.071450][T10486] Use struct sctp_sack_info instead [ 325.096106][ T28] audit: type=1400 audit(1775737199.102:3072): avc: denied { write } for pid=10485 comm="syz.6.1723" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 325.243225][T10492] loop2: detected capacity change from 0 to 512 [ 325.528113][T10496] loop9: detected capacity change from 0 to 512 [ 326.392768][T10492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.439433][T10499] loop5: detected capacity change from 0 to 512 [ 326.470737][T10499] EXT4-fs: Ignoring removed oldalloc option [ 326.505519][T10496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.634563][T10499] EXT4-fs: Ignoring removed orlov option [ 326.670688][T10499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.994428][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 327.193760][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.256048][T10506] loop5: detected capacity change from 0 to 128 [ 327.263044][T10506] msdos: Bad value for 'gid' [ 327.268084][T10506] msdos: Bad value for 'gid' [ 327.429766][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.497923][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1728'. [ 327.666301][ T28] audit: type=1326 audit(1775737201.682:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.0.1728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x0 [ 327.868938][T10541] loop0: detected capacity change from 0 to 1024 [ 327.886245][T10541] EXT4-fs: Ignoring removed i_version option [ 327.905379][T10541] EXT4-fs: Ignoring removed bh option [ 328.116681][T10548] loop2: detected capacity change from 0 to 512 [ 328.143562][T10547] loop5: detected capacity change from 0 to 512 [ 328.184320][T10541] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 328.205509][T10548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.222614][T10547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.353635][T10541] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 328.561589][T10554] loop6: detected capacity change from 0 to 512 [ 328.575528][T10541] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 328.631987][T10554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.668120][T10541] EXT4-fs (loop0): orphan cleanup on readonly fs [ 328.726044][T10541] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 328.742567][T10554] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.761454][T10541] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 328.923424][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.949517][T10546] syzkaller0: entered promiscuous mode [ 328.955521][T10541] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 328.962568][T10541] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1728: bad orphan inode 11 [ 328.974513][T10546] syzkaller0: entered allmulticast mode [ 328.983654][T10541] loop0: lost filesystem error report for type 5 error -117 [ 328.983784][T10541] ext4_test_bit(bit=10, block=1) = 0 [ 328.991352][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 328.991376][ C0] EXT4-fs (loop0): initial error at time 1775737203: ext4_orphan_get:1423 [ 328.991408][ C0] EXT4-fs (loop0): last error at time 1775737203: ext4_orphan_get:1423 [ 329.045131][T10541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.231781][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.242826][T10563] loop9: detected capacity change from 0 to 128 [ 329.286999][ T28] audit: type=1400 audit(1775737203.302:3074): avc: denied { watch_reads } for pid=10561 comm="syz.9.1743" path="/64/file1" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 329.413808][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.528141][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.555029][T10571] loop6: detected capacity change from 0 to 4096 [ 329.564675][T10567] loop5: detected capacity change from 0 to 164 [ 329.573114][T10571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.573507][T10572] xfrm0 speed is unknown, defaulting to 1000 [ 329.619793][T10567] ISOFS: unable to read i-node block [ 329.625245][T10567] isofs_fill_super: get root inode failed [ 329.655413][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.708601][T10567] ipip0: entered promiscuous mode [ 329.797538][T10567] netlink: 'syz.5.1741': attribute type 1 has an invalid length. [ 330.059965][T10597] loop2: detected capacity change from 0 to 128 [ 330.067246][T10597] msdos: Bad value for 'gid' [ 330.071913][T10597] msdos: Bad value for 'gid' [ 330.300188][T10584] syzkaller0: entered promiscuous mode [ 330.308582][T10584] syzkaller0: entered allmulticast mode [ 330.355523][T10572] lo speed is unknown, defaulting to 1000 [ 330.422458][T10600] loop6: detected capacity change from 0 to 32768 [ 330.541825][T10607] loop9: detected capacity change from 0 to 512 [ 330.710163][T10607] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.724107][T10614] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 330.744351][T10614] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 330.753851][T10607] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.785107][T10614] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1757: bad orphan inode 4 [ 330.912399][T10614] loop0: lost filesystem error report for type 5 error -117 [ 330.912635][T10614] EXT4-fs (loop0): Remounting filesystem read-only [ 330.920083][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 330.920103][ C1] EXT4-fs (loop0): initial error at time 1775737204: ext4_orphan_get:1423 [ 330.920127][ C1] EXT4-fs (loop0): last error at time 1775737204: ext4_orphan_get:1423 [ 331.027198][T10614] EXT4-fs (loop0): 1 orphan inode deleted [ 331.040116][T10614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.115338][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.164877][T10609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.196326][T10609] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1756: bg 0: block 234: padding at end of block bitmap is not set [ 331.213510][T10609] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 117 [ 331.233280][T10609] EXT4-fs (loop2): This should not happen!! Data will be lost [ 331.233280][T10609] [ 331.244518][ T28] audit: type=1400 audit(1775737205.272:3075): avc: denied { map } for pid=10608 comm="syz.2.1756" path="/367/file0/blkio.bfq.group_wait_time" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 331.348456][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.423063][T10600] loop6: p1 p2 p3 < > [ 331.743222][T10630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.779285][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 331.789101][T10605] kexec: Could not allocate control_code_buffer [ 331.798253][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 332.000953][ T3571] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 332.013836][T10609] xfrm0 speed is unknown, defaulting to 1000 [ 332.032210][ T3571] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 332.126902][T10656] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1767'. [ 332.156742][T10609] lo speed is unknown, defaulting to 1000 [ 332.209390][ T5101] IPVS: starting estimator thread 0... [ 332.258798][T10665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.291798][T10665] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.302315][T10659] IPVS: using max 2544 ests per chain, 127200 per kthread [ 332.542343][ T3311] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 332.554848][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.786518][T10677] netlink: 'syz.2.1770': attribute type 5 has an invalid length. [ 332.794344][T10677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1770'. [ 332.921840][T10689] set_capacity_and_notify: 4 callbacks suppressed [ 332.921855][T10689] loop9: detected capacity change from 0 to 128 [ 333.018416][T10700] loop5: detected capacity change from 0 to 128 [ 333.041221][T10700] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 333.059708][T10700] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.117725][T10700] ext2 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.129079][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.169208][ T5554] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.255241][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'. [ 333.289368][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'. [ 333.310331][T10709] loop5: detected capacity change from 0 to 512 [ 333.323765][T10709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.354788][T10712] bridge2: entered promiscuous mode [ 333.411563][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.553071][T10726] loop6: detected capacity change from 0 to 128 [ 333.580040][T10726] FAT-fs (loop6): bogus number of FAT sectors [ 333.589673][T10730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1790'. [ 333.600780][T10726] FAT-fs (loop6): Can't find a valid FAT filesystem [ 333.611861][T10730] tmpfs: Bad value for 'mpol' [ 333.643707][T10726] loop6: detected capacity change from 0 to 1024 [ 333.667529][T10726] EXT4-fs: Ignoring removed bh option [ 333.694836][T10734] loop9: detected capacity change from 0 to 512 [ 333.718891][T10726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.741292][T10729] loop2: detected capacity change from 0 to 8192 [ 333.778230][T10734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.811279][T10726] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.827159][T10734] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.856127][ T3637] loop2: p2 p3 p4[EZD] [ 333.861486][ T3637] loop2: p2 size 2130706432 extends beyond EOD, truncated [ 333.890804][ T3637] loop2: p3 start 458783 is beyond EOD, truncated [ 333.927760][ T3637] loop2: p4 size 65536 extends beyond EOD, truncated [ 333.953579][T10742] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.1788: Freeing blocks not in datazone - block = 0, count = 16 [ 333.989790][T10742] EXT4-fs (loop6): Remounting filesystem read-only [ 333.997977][T10729] loop2: p2 p3 p4[EZD] [ 334.002418][T10729] loop2: p2 size 2130706432 extends beyond EOD, truncated [ 334.011385][T10729] loop2: p3 start 458783 is beyond EOD, truncated [ 334.037681][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 334.052192][T10729] loop2: p4 size 65536 extends beyond EOD, truncated [ 334.171400][T10753] loop6: detected capacity change from 0 to 128 [ 334.172025][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 334.179755][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 334.223149][T10753] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.308038][T10753] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.341722][T10753] EXT4-fs (loop6): shut down requested (0) [ 334.350957][T10756] loop2: detected capacity change from 0 to 512 [ 334.362217][T10756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.388282][ T28] audit: type=1400 audit(1775737208.392:3076): avc: denied { create } for pid=10746 comm="syz.6.1794" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 334.459817][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 334.459820][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 334.481505][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.494954][T10759] loop5: detected capacity change from 0 to 512 [ 334.581107][T10759] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.655996][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1795'. [ 334.676577][T10769] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.724961][T10745] tipc: Failed to remove unknown binding: 66,0,0/0:1999186178/1999186179 [ 334.735311][T10745] tipc: Failed to remove unknown binding: 66,0,0/0:1999186178/1999186179 [ 335.176737][T10794] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1807'. [ 335.186879][T10794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1807'. [ 335.539681][T10801] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.690644][ T28] audit: type=1400 audit(1775737209.722:3077): avc: denied { cpu } for pid=10803 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 335.939784][ T3637] loop2: p2 p3 p7 [ 336.443499][T10815] loop2: p2 p3 p7 [ 336.526791][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 336.528776][ T28] audit: type=1400 audit(1775737210.522:3078): avc: denied { read write } for pid=10814 comm="syz.2.1814" name="loop2p3" dev="devtmpfs" ino=1909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.539448][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 336.560579][ T28] audit: type=1400 audit(1775737210.522:3079): avc: denied { open } for pid=10814 comm="syz.2.1814" path="/dev/loop2p3" dev="devtmpfs" ino=1909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.580175][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 336.610191][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1820'. [ 336.630270][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 336.928409][T10845] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 337.194022][T10845] bond2 (unregistering): Released all slaves [ 337.374457][ T28] audit: type=1326 audit(1775737211.402:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.0.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 337.405537][ T28] audit: type=1326 audit(1775737211.402:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.0.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 337.433601][ T28] audit: type=1326 audit(1775737211.432:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.0.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 337.527511][ T28] audit: type=1326 audit(1775737211.432:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.0.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 337.552522][ T28] audit: type=1326 audit(1775737211.432:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.0.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 337.577150][ T28] audit: type=1326 audit(1775737211.432:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.0.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc9a30dc819 code=0x7ffc0000 [ 338.262747][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1826'. [ 338.480596][T10871] set_capacity_and_notify: 6 callbacks suppressed [ 338.480616][T10871] loop5: detected capacity change from 0 to 512 [ 338.531267][T10871] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.568838][T10874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1832'. [ 338.613511][T10880] netem: invalid attributes len -24 [ 338.763548][T10891] loop6: detected capacity change from 0 to 1024 [ 338.772426][T10891] EXT4-fs: Ignoring removed i_version option [ 338.778915][T10891] EXT4-fs: Ignoring removed bh option [ 338.786734][T10891] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 338.797044][T10891] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 338.809572][T10889] loop0: detected capacity change from 0 to 512 [ 338.816829][T10891] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.828971][T10891] EXT4-fs (loop6): orphan cleanup on readonly fs [ 338.839533][T10891] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 338.854693][T10891] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 338.861651][T10891] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1832: bad orphan inode 11 [ 338.872115][T10891] loop6: lost filesystem error report for type 5 error -117 [ 338.872302][T10891] ext4_test_bit(bit=10, block=1) = 0 [ 338.879873][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 338.879895][ C0] EXT4-fs (loop6): initial error at time 1775737212: ext4_orphan_get:1423 [ 338.879922][ C0] EXT4-fs (loop6): last error at time 1775737212: ext4_orphan_get:1423 [ 338.920484][T10901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.927875][T10901] IPv6: NLM_F_CREATE should be set when creating new route [ 338.940292][T10901] --map-set only usable from mangle table [ 339.226922][T10905] loop9: detected capacity change from 0 to 512 [ 339.568320][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 339.568343][ T28] audit: type=1326 audit(1775737213.472:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 339.637869][ T28] audit: type=1326 audit(1775737213.512:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 339.662810][ T28] audit: type=1326 audit(1775737213.522:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 339.687674][ T28] audit: type=1326 audit(1775737213.522:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 339.715649][ T28] audit: type=1326 audit(1775737213.522:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 339.862081][T10912] ------------[ cut here ]------------ [ 339.868507][T10912] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 339.893922][T10912] WARNING: kernel/bpf/verifier.c:2830 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.2.1848/10912 [ 339.905686][T10912] Modules linked in: [ 339.909623][T10912] CPU: 0 UID: 0 PID: 10912 Comm: syz.2.1848 Tainted: G W syzkaller #0 PREEMPT(full) [ 339.920611][T10912] Tainted: [W]=WARN [ 339.924488][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.934686][T10912] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 339.941367][T10912] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 339.961302][T10912] RSP: 0018:ffffc90006e87370 EFLAGS: 00010246 [ 339.967417][T10912] RAX: ffff888104a76f48 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 339.975494][T10912] RDX: ffffffff8681a08d RSI: ffffffff866db48d RDI: ffffffff871d2830 [ 339.983660][T10912] RBP: ffff88810cd5c270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 339.992113][T10912] R10: ffffffff893d6ad8 R11: ffffffffffffdfcc R12: ffff88810cd5c230 [ 340.000497][T10912] R13: 00000000ffffdfcc R14: ffff88810cd5c27c R15: ffff88810cd5c268 [ 340.008497][T10912] FS: 00007f2b8e3676c0(0000) GS:ffff8882ae8d7000(0000) knlGS:0000000000000000 [ 340.017524][T10912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.024216][T10912] CR2: 00002000000054c0 CR3: 0000000141ff8000 CR4: 00000000003506f0 [ 340.032478][T10912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.040851][T10912] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 340.048933][T10912] Call Trace: [ 340.052298][T10912] [ 340.055290][T10912] reg_set_min_max+0x1c8/0x260 [ 340.060130][T10912] check_cond_jmp_op+0x13b2/0x1a80 [ 340.065265][T10912] do_check+0x4a9b/0x9840 [ 340.069879][T10912] do_check_common+0xd0b/0x1630 [ 340.074755][T10912] bpf_check+0x2f78/0xcc30 [ 340.079260][T10912] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 340.085422][T10912] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 340.086474][ T28] audit: type=1326 audit(1775737213.522:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 340.091191][T10912] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 340.114881][ T28] audit: type=1326 audit(1775737213.522:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 340.120829][T10912] ? try_charge_memcg+0x215/0xa10 [ 340.149949][T10912] ? pcpu_block_update+0x310/0x3b0 [ 340.155226][T10912] ? _find_next_zero_bit+0x64/0xa0 [ 340.160495][T10912] ? pcpu_block_refresh_hint+0x157/0x170 [ 340.166249][T10912] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 340.172434][T10912] ? css_rstat_updated+0xbb/0x280 [ 340.177510][T10912] ? mod_memcg_state+0x182/0x270 [ 340.182803][T10912] ? __rcu_read_unlock+0x4e/0x70 [ 340.188125][T10912] ? avc_has_perm_noaudit+0xab/0x130 [ 340.193524][T10912] ? avc_has_perm+0x101/0x190 [ 340.198388][T10912] ? selinux_bpf_prog_load+0x197/0x1c0 [ 340.203990][T10912] ? security_bpf_prog_load+0x9e/0x140 [ 340.209576][T10912] bpf_prog_load+0xf76/0x1140 [ 340.214358][T10912] ? security_bpf+0x2b/0x90 [ 340.218990][T10912] __sys_bpf+0x505/0x7e0 [ 340.223312][T10912] __x64_sys_bpf+0x41/0x50 [ 340.227832][T10912] x64_sys_call+0x10cb/0x3020 [ 340.232602][T10912] do_syscall_64+0x12c/0x370 [ 340.237402][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.243478][T10912] RIP: 0033:0x7f2b8f90c819 [ 340.247934][T10912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.268076][T10912] RSP: 002b:00007f2b8e367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.276607][T10912] RAX: ffffffffffffffda RBX: 00007f2b8fb85fa0 RCX: 00007f2b8f90c819 [ 340.284689][T10912] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 340.292878][T10912] RBP: 00007f2b8f9a2c91 R08: 0000000000000000 R09: 0000000000000000 [ 340.300883][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.309042][T10912] R13: 00007f2b8fb86038 R14: 00007f2b8fb85fa0 R15: 00007ffd22ef8908 [ 340.317174][T10912] [ 340.320253][T10912] ---[ end trace 0000000000000000 ]--- [ 340.338049][ T28] audit: type=1326 audit(1775737213.522:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 340.369590][ T28] audit: type=1326 audit(1775737213.522:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 340.408649][ T28] audit: type=1326 audit(1775737213.522:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 340.642451][T10932] xfrm0 speed is unknown, defaulting to 1000 [ 340.683703][T10932] lo speed is unknown, defaulting to 1000 [ 340.721441][T10941] loop5: detected capacity change from 0 to 512 [ 340.825117][T10940] loop0: detected capacity change from 0 to 512 [ 340.851209][T10941] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.045178][T10953] loop6: detected capacity change from 0 to 512 [ 341.066974][T10953] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 341.084801][T10953] EXT4-fs (loop6): 1 truncate cleaned up [ 341.202252][T10967] loop2: detected capacity change from 0 to 512 [ 342.909146][T10986] loop9: detected capacity change from 0 to 128 [ 342.916313][T10986] msdos: Bad value for 'gid' [ 342.920963][T10986] msdos: Bad value for 'gid' [ 346.274148][T10994] loop2: detected capacity change from 0 to 512 [ 346.302767][T10994] EXT4-fs mount: 31 callbacks suppressed [ 346.302787][T10994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.330791][T11000] FAULT_INJECTION: forcing a failure. [ 346.330791][T11000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.386772][T11000] CPU: 0 UID: 0 PID: 11000 Comm: syz.6.1872 Tainted: G W syzkaller #0 PREEMPT(full) [ 346.386849][T11000] Tainted: [W]=WARN [ 346.386854][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 346.386918][T11000] Call Trace: [ 346.386925][T11000] [ 346.386934][T11000] __dump_stack+0x1d/0x30 [ 346.386958][T11000] dump_stack_lvl+0x95/0xd0 [ 346.386976][T11000] dump_stack+0x15/0x1b [ 346.386999][T11000] should_fail_ex+0x263/0x280 [ 346.387084][T11000] should_fail+0xb/0x20 [ 346.387108][T11000] should_fail_usercopy+0x1a/0x20 [ 346.387187][T11000] _copy_to_user+0x20/0xa0 [ 346.387212][T11000] simple_read_from_buffer+0xb5/0x130 [ 346.387236][T11000] proc_fail_nth_read+0x10e/0x150 [ 346.387336][T11000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.387365][T11000] vfs_read+0x1ab/0x7f0 [ 346.387384][T11000] ? __rcu_read_unlock+0x4e/0x70 [ 346.387481][T11000] ? __fget_files+0x184/0x1c0 [ 346.387505][T11000] ? mutex_lock+0x57/0x90 [ 346.387524][T11000] ksys_read+0xdc/0x1a0 [ 346.387572][T11000] __x64_sys_read+0x40/0x50 [ 346.387656][T11000] x64_sys_call+0x2886/0x3020 [ 346.387682][T11000] do_syscall_64+0x12c/0x370 [ 346.387781][T11000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.387833][T11000] RIP: 0033:0x7fb4f2acd04e [ 346.387850][T11000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.387865][T11000] RSP: 002b:00007fb4f155efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.387882][T11000] RAX: ffffffffffffffda RBX: 00007fb4f155f6c0 RCX: 00007fb4f2acd04e [ 346.387895][T11000] RDX: 000000000000000f RSI: 00007fb4f155f0a0 RDI: 0000000000000005 [ 346.387907][T11000] RBP: 00007fb4f155f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.387925][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.387939][T11000] R13: 00007fb4f2d86038 R14: 00007fb4f2d85fa0 R15: 00007ffd5981e928 [ 346.387959][T11000] [ 346.596691][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.620457][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 346.638180][T11007] loop2: detected capacity change from 0 to 512 [ 346.640262][T11009] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1876'. [ 346.654317][T11009] tc_dump_action: action bad kind [ 346.661080][T11007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.692351][T11007] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.720546][T11013] openvswitch: netlink: Message has 8 unknown bytes. [ 346.744468][T11015] bridge3: entered promiscuous mode [ 346.897743][T11017] siw: device registration error -23 [ 346.904614][T11017] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1878'. [ 346.933621][T11017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.953935][T11017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.974919][T11017] bond0 (unregistering): Released all slaves [ 347.297957][T11034] loop0: detected capacity change from 0 to 128 [ 347.305633][T11034] msdos: Bad value for 'gid' [ 347.310304][T11034] msdos: Bad value for 'gid' [ 347.565443][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.021860][T11043] loop6: detected capacity change from 0 to 512 [ 348.037129][T11043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.138560][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 348.138574][ T28] audit: type=1326 audit(1775737222.172:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11041 comm="syz.2.1883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b8f90c819 code=0x0 [ 349.000674][T11053] loop9: detected capacity change from 0 to 512 [ 349.841805][T11053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.213360][T11071] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1891'. [ 350.273388][T11077] loop5: detected capacity change from 0 to 512 [ 350.283992][T11077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.302470][T11077] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.672232][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.702580][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.814335][ T28] audit: type=1326 audit(1775737224.842:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 350.840555][ T28] audit: type=1326 audit(1775737224.862:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 350.865918][ T28] audit: type=1326 audit(1775737224.872:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 350.935430][ T28] audit: type=1326 audit(1775737224.872:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 350.987817][T11096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11096 comm=syz.6.1895 [ 351.005907][T11096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11096 comm=syz.6.1895 [ 351.032049][ T28] audit: type=1326 audit(1775737224.872:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 351.062019][ T28] audit: type=1326 audit(1775737224.932:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8f90c819 code=0x7ffc0000 [ 351.091124][ T28] audit: type=1326 audit(1775737224.932:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2b8f90c582 code=0x7ffc0000 [ 351.218571][T11092] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 351.246531][ T28] audit: type=1326 audit(1775737224.932:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2b8f90c617 code=0x7ffc0000 [ 351.275394][ T28] audit: type=1326 audit(1775737224.932:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11089 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2b8f8c9511 code=0x7ffc0000 [ 351.276108][T11092] bond0 (unregistering): Released all slaves [ 351.306191][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.401648][T11112] loop5: detected capacity change from 0 to 512 [ 351.435161][T11112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.693865][T11129] loop0: detected capacity change from 0 to 512 [ 351.706573][T11129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.728512][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.795432][T11134] loop2: detected capacity change from 0 to 128 [ 351.802773][T11134] msdos: Bad value for 'gid' [ 351.807693][T11134] msdos: Bad value for 'gid' [ 351.951725][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.864446][T11150] loop0: detected capacity change from 0 to 512 [ 352.942090][T11157] loop6: detected capacity change from 0 to 1024 [ 352.949181][T11157] ext2: Unknown parameter 'smackfshat' [ 353.668873][T11169] loop2: detected capacity change from 0 to 512 [ 353.866071][T11172] loop6: detected capacity change from 0 to 512 [ 353.877846][T11172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.065558][T11182] loop0: detected capacity change from 0 to 512 [ 354.095599][T11182] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1923: inode has both inline data and extents flags [ 354.129405][T11179] loop5: detected capacity change from 0 to 8192 [ 354.156113][T11182] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 354.156213][T11182] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1923: couldn't read orphan inode 15 (err -117) [ 354.177701][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 354.177787][ C0] EXT4-fs (loop0): initial error at time 1775737228: ext4_orphan_get:1397: inode 15 [ 354.177815][ C0] EXT4-fs (loop0): last error at time 1775737228: ext4_orphan_get:1397: inode 15 [ 354.213303][T11182] loop0: lost filesystem error report for type 5 error -117 [ 354.214143][T11182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.236574][T11179] loop5: p2 p3 [ 354.299363][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.309659][T11179] loop5: p3 size 100663552 extends beyond EOD, truncated [ 354.571560][T11197] loop0: detected capacity change from 0 to 256 [ 354.587466][T11197] vfat: Unknown parameter '' [ 354.601416][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 354.601431][ T28] audit: type=1400 audit(1775737228.632:3247): avc: denied { execute } for pid=11196 comm="syz.0.1927" path="/383/file1" dev="tmpfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 354.668881][T11197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.691564][T11197] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.716699][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.804770][ T2999] loop5: p2 p3 [ 354.813328][T11207] 8021q: VLANs not supported on xfrm0 [ 354.819843][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.820181][ T2999] loop5: p3 size 100663552 extends beyond EOD, [ 354.831053][T11203] 9p: Bad value for 'source' [ 354.840064][ T2999] truncated [ 354.935017][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 354.935591][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 355.031385][T11220] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 355.078118][T11220] EXT4-fs (loop5): orphan cleanup on readonly fs [ 355.103764][T11220] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 355.134893][T11232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.159725][T11220] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 355.169069][T11233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.201668][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.204762][T11220] EXT4-fs (loop5): 1 truncate cleaned up [ 355.223445][T11220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.235882][T11233] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.237853][T11233] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1939'. [ 355.254779][T11239] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.261184][T11233] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1939'. [ 355.272220][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1939'. [ 355.312057][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.325298][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.427235][T11254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.440352][T11254] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.486703][T11257] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1944'. [ 355.640047][T11258] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 355.651234][T11258] FAT-fs (loop2): Filesystem has been set read-only [ 356.041882][T11261] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.105130][T11261] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.173089][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1949'. [ 356.293426][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.338227][T11270] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.405742][T11270] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.504128][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1956'. [ 356.560234][T11282] set_capacity_and_notify: 8 callbacks suppressed [ 356.560259][T11282] loop6: detected capacity change from 0 to 1024 [ 356.576882][T11280] sctp: [Deprecated]: syz.5.1953 (pid 11280) Use of int in max_burst socket option. [ 356.576882][T11280] Use struct sctp_assoc_value instead [ 356.672762][T11288] loop9: detected capacity change from 0 to 1024 [ 356.741438][T11288] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 356.842289][ T6845] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 357.064084][T11309] loop5: detected capacity change from 0 to 512 [ 357.097970][T11309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.175936][T11309] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.223990][T11288] loop9: detected capacity change from 0 to 4096 [ 357.271103][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 357.294601][T11288] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.378653][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'. [ 357.397081][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.425743][T11328] syzkaller0: entered promiscuous mode [ 357.431736][T11328] syzkaller0: entered allmulticast mode [ 357.532191][T11337] syzkaller0: entered promiscuous mode [ 357.538594][T11337] syzkaller0: entered allmulticast mode [ 357.595442][T11338] loop9: detected capacity change from 0 to 512 [ 357.604929][T11338] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.818510][T11346] loop0: detected capacity change from 0 to 128 [ 357.826076][T11346] msdos: Bad value for 'gid' [ 357.830780][T11346] msdos: Bad value for 'gid' [ 358.078245][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.497486][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.579951][ T5109] kernel read not supported for file [fscontext] (pid: 5109 comm: kworker/0:9) [ 358.659125][T11356] loop2: detected capacity change from 0 to 1024 [ 358.669500][T11356] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 358.791968][T11362] loop5: detected capacity change from 0 to 1024 [ 358.807757][T11362] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 358.921407][T11365] loop9: detected capacity change from 0 to 512 [ 358.950672][T11365] EXT4-fs: Ignoring removed oldalloc option [ 359.004990][T11365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.017674][T11367] loop6: detected capacity change from 0 to 128 [ 359.054764][T11365] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.1984: iget: bad i_size value: 38620345925642 [ 359.112622][T11365] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 359.112784][T11365] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.1984: couldn't read orphan inode 15 (err -117) [ 359.122655][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 359.122674][ C0] EXT4-fs (loop9): initial error at time 1775737233: ext4_orphan_get:1397: inode 15 [ 359.122708][ C0] EXT4-fs (loop9): last error at time 1775737233: ext4_orphan_get:1397: inode 15 [ 359.230776][T11370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.334427][T11365] loop9: lost filesystem error report for type 5 error -117 [ 359.338091][T11365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.380771][ T28] audit: type=1400 audit(1775737233.412:3248): avc: denied { mounton } for pid=11366 comm="syz.6.1985" path="/232/file2/file0" dev="loop6" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 359.409201][T11377] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1986'. [ 359.430896][T11367] syzkaller0: entered promiscuous mode [ 359.441744][T11367] syzkaller0: entered allmulticast mode [ 359.448125][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.476415][T11362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.638936][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.656995][T11383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.690435][T11383] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.738926][T11389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.792918][ T6964] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 359.806338][ T6964] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 359.819605][ T6964] EXT4-fs (loop9): This should not happen!! Data will be lost [ 359.819605][ T6964] [ 359.829584][ T6964] EXT4-fs (loop9): Total free blocks count 0 [ 359.847698][ T6964] EXT4-fs (loop9): Free/Dirty block details [ 359.853883][ T6652] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 359.853944][ T6964] EXT4-fs (loop9): free_blocks=0 [ 359.867185][ T6652] FAT-fs (loop6): Filesystem has been set read-only [ 359.869677][ T6964] EXT4-fs (loop9): dirty_blocks=6988 [ 359.879738][ T6964] EXT4-fs (loop9): Block reservation details [ 359.886607][ T6964] EXT4-fs (loop9): i_reserved_data_blocks=6988 [ 359.906269][ T6964] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 359.931813][ T9234] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 360.003966][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1990'. [ 360.019201][T11402] FAULT_INJECTION: forcing a failure. [ 360.019201][T11402] name failslab, interval 1, probability 0, space 0, times 0 [ 360.037761][T11402] CPU: 0 UID: 0 PID: 11402 Comm: syz.6.1992 Tainted: G W syzkaller #0 PREEMPT(full) [ 360.037789][T11402] Tainted: [W]=WARN [ 360.037795][T11402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.037805][T11402] Call Trace: [ 360.037809][T11402] [ 360.037815][T11402] __dump_stack+0x1d/0x30 [ 360.037875][T11402] dump_stack_lvl+0x95/0xd0 [ 360.037896][T11402] dump_stack+0x15/0x1b [ 360.037975][T11402] should_fail_ex+0x263/0x280 [ 360.038035][T11402] ? syslog_print_all+0x79/0x3c0 [ 360.038054][T11402] should_failslab+0x8c/0xb0 [ 360.038075][T11402] __kmalloc_cache_noprof+0x5f/0x410 [ 360.038156][T11402] syslog_print_all+0x79/0x3c0 [ 360.038175][T11402] ? avc_has_perm+0x101/0x190 [ 360.038285][T11402] do_syslog+0x2fd/0x7f0 [ 360.038309][T11402] ? ksys_write+0x194/0x1a0 [ 360.038330][T11402] __x64_sys_syslog+0x41/0x50 [ 360.038401][T11402] x64_sys_call+0x2b9e/0x3020 [ 360.038434][T11402] do_syscall_64+0x12c/0x370 [ 360.038536][T11402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.038557][T11402] RIP: 0033:0x7fb4f2b0c819 [ 360.038573][T11402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.038588][T11402] RSP: 002b:00007fb4f155f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 360.038605][T11402] RAX: ffffffffffffffda RBX: 00007fb4f2d85fa0 RCX: 00007fb4f2b0c819 [ 360.038617][T11402] RDX: 0000000000000026 RSI: 0000200000000040 RDI: 0000000000000004 [ 360.038711][T11402] RBP: 00007fb4f155f090 R08: 0000000000000000 R09: 0000000000000000 [ 360.038724][T11402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.038737][T11402] R13: 00007fb4f2d86038 R14: 00007fb4f2d85fa0 R15: 00007ffd5981e928 [ 360.038758][T11402] [ 360.038946][T11398] veth0_macvtap: left promiscuous mode [ 360.417551][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.444985][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1997'. [ 360.473030][T11421] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 360.550976][T11425] msdos: Bad value for 'gid' [ 360.555660][T11425] msdos: Bad value for 'gid' [ 361.021385][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.814647][T11441] set_capacity_and_notify: 6 callbacks suppressed [ 361.814765][T11441] loop6: detected capacity change from 0 to 512 [ 362.274856][T11443] loop2: detected capacity change from 0 to 4096 [ 363.519199][T11443] EXT4-fs: error -4 creating inode table initialization thread [ 363.535461][T11443] EXT4-fs (loop2): mount failed [ 364.265040][T11441] EXT4-fs: error -4 creating inode table initialization thread [ 364.275670][T11441] EXT4-fs (loop6): mount failed [ 364.304083][T11450] loop9: detected capacity change from 0 to 512 [ 365.554963][T11460] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 365.759598][T11460] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 365.778070][ T28] audit: type=1400 audit(1775737239.812:3249): avc: denied { shutdown } for pid=11461 comm="syz.6.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 365.834752][T11450] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.338586][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.353660][T11472] loop0: detected capacity change from 0 to 512 [ 366.382095][T11472] EXT4-fs (loop0): 1 truncate cleaned up [ 366.396494][T11472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.435890][T11472] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 366.447149][ T28] audit: type=1400 audit(1775737240.462:3250): avc: denied { remount } for pid=11471 comm="syz.0.2011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 366.540444][ T28] audit: type=1400 audit(1775737240.562:3251): avc: denied { create } for pid=11481 comm="syz.9.2014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=smc_socket permissive=1 [ 366.562057][ T28] audit: type=1400 audit(1775737240.562:3252): avc: denied { create } for pid=11481 comm="syz.9.2014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 366.677911][T11474] loop2: detected capacity change from 0 to 512 [ 366.831129][T11510] loop9: detected capacity change from 0 to 1024 [ 366.834287][T11510] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 366.884776][ T28] audit: type=1400 audit(1775737240.912:3253): avc: denied { setopt } for pid=11514 comm="syz.5.2025" lport=34312 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 366.963233][ T28] audit: type=1400 audit(1775737240.982:3254): avc: denied { mount } for pid=11519 comm="syz.5.2026" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 366.988806][T11526] can: request_module (can-proto-0) failed. [ 367.006143][T11517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2024'. [ 367.162438][T11510] loop9: detected capacity change from 0 to 4096 [ 367.223730][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.252456][T11510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.318694][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2031'. [ 367.378310][T11555] loop6: detected capacity change from 0 to 256 [ 367.709335][T11544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.775990][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.820349][T11564] loop9: detected capacity change from 0 to 512 [ 367.867920][T11564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 367.881158][ T369] tipc: Subscription rejected, illegal request [ 367.885536][T11564] ext4 filesystem being mounted at /131/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.910934][T11576] veth1_to_bond: entered allmulticast mode [ 367.917723][T11564] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000d40000. [ 367.930553][ T28] audit: type=1400 audit(1775737241.962:3255): avc: granted { setsecparam } for pid=11575 comm="syz.5.2039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 367.967046][ T28] audit: type=1400 audit(1775737241.992:3256): avc: denied { setopt } for pid=11577 comm="syz.0.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.988587][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 368.167486][T11575] veth1_to_bond: left allmulticast mode [ 368.225634][T11600] loop5: detected capacity change from 0 to 1024 [ 368.232552][T11600] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 368.413124][T11608] loop6: detected capacity change from 0 to 1024 [ 368.468276][T11608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.502259][T11600] loop5: detected capacity change from 0 to 4096 [ 368.511352][ T28] audit: type=1326 audit(1775737242.542:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11593 comm="syz.6.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f2b0c819 code=0x7ffc0000 [ 368.539954][ T28] audit: type=1326 audit(1775737242.542:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11593 comm="syz.6.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f2b0c819 code=0x7ffc0000 [ 368.577834][T11600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.668331][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.729116][T11589] syzkaller0: entered promiscuous mode [ 368.734968][T11589] syzkaller0: entered allmulticast mode [ 368.817067][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'. [ 368.913710][T11636] netlink: 'syz.5.2052': attribute type 10 has an invalid length. [ 368.924910][T11636] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 369.033353][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.105140][T11648] loop9: detected capacity change from 0 to 4096 [ 369.144051][T11648] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.196286][T11654] bond4: entered allmulticast mode [ 369.215457][T11654] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.345545][T11658] loop6: detected capacity change from 0 to 128 [ 369.352552][T11658] msdos: Bad value for 'gid' [ 369.357392][T11658] msdos: Bad value for 'gid' [ 369.442944][T11661] loop2: detected capacity change from 0 to 8192 [ 369.498872][ T3637] loop2: p1 < > p2 p4 < p5 > [ 369.513566][ T3637] loop2: partition table partially beyond EOD, truncated [ 369.525264][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.534949][ T3637] loop2: p1 start 134217728 is beyond EOD, truncated [ 369.548727][ T3637] loop2: p2 size 591360 extends beyond EOD, truncated [ 369.587287][ T3637] loop2: p5 size 591360 extends beyond EOD, truncated [ 369.670591][T11661] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 369.714064][ T2999] loop2: p1 < > p2 p4 < p5 > [ 369.721020][ T2999] loop2: partition table partially beyond EOD, truncated [ 369.734556][ T2999] loop2: p1 start 134217728 is beyond EOD, truncated [ 369.745635][ T2999] loop2: p2 size 591360 extends beyond EOD, truncated [ 369.759648][ T2999] loop2: p5 size 591360 extends beyond EOD, truncated [ 369.812447][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 369.813006][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 369.835100][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 370.459594][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'. [ 370.552313][T11700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.682464][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2073'. [ 371.053411][T11673] syzkaller0: entered promiscuous mode [ 371.059147][T11673] syzkaller0: entered allmulticast mode [ 371.994642][T11734] set_capacity_and_notify: 1 callbacks suppressed [ 371.994658][T11734] loop2: detected capacity change from 0 to 1024 [ 372.059396][T11734] EXT4-fs: test_dummy_encryption option not supported [ 372.215316][T11744] loop9: detected capacity change from 0 to 512 [ 372.222225][T11744] ext4: Unknown parameter 'noacl' [ 372.344175][T11745] loop2: detected capacity change from 0 to 512 [ 373.252926][T11749] loop9: detected capacity change from 0 to 512 [ 373.259581][T11749] EXT4-fs: Ignoring removed orlov option [ 374.265517][ T28] kauditd_printk_skb: 349 callbacks suppressed [ 374.265609][ T28] audit: type=1400 audit(1775737247.282:3608): avc: denied { lock } for pid=11743 comm="syz.9.2084" path="socket:[32742]" dev="sockfs" ino=32742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 375.229157][T11749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.403560][T11749] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 375.403591][T11749] EXT4-fs: failed to create workqueue [ 375.419633][T11749] EXT4-fs (loop9): mount failed [ 375.424559][T11745] EXT4-fs (loop2): 1 orphan inode deleted [ 375.434299][T11745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.452833][T11745] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.553239][T11757] xfrm0 speed is unknown, defaulting to 1000 [ 375.651063][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.795517][ T28] audit: type=1400 audit(1775737249.822:3609): avc: denied { create } for pid=11756 comm="syz.5.2086" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 375.844837][T11757] lo speed is unknown, defaulting to 1000 [ 375.850996][ T28] audit: type=1400 audit(1775737249.822:3610): avc: denied { read write } for pid=11756 comm="syz.5.2086" name="file0" dev="tmpfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 375.874290][T11768] loop2: detected capacity change from 0 to 8192 [ 375.924025][ T28] audit: type=1400 audit(1775737249.822:3611): avc: denied { open } for pid=11756 comm="syz.5.2086" path="/316/file0" dev="tmpfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 375.966219][ T3637] loop2: p1 < > p2 p4 < p5 > [ 375.970925][ T3637] loop2: partition table partially beyond EOD, truncated [ 375.978431][ T3637] loop2: p1 start 134217728 is beyond EOD, truncated [ 375.985295][ T3637] loop2: p2 size 591360 extends beyond EOD, truncated [ 375.999411][ T3637] loop2: p5 size 591360 extends beyond EOD, truncated [ 376.024469][T11780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2088'. [ 376.056225][T11768] loop2: p1 < > p2 p4 < p5 > [ 376.061061][T11768] loop2: partition table partially beyond EOD, truncated [ 376.075899][T11768] loop2: p1 start 134217728 is beyond EOD, truncated [ 376.082703][T11768] loop2: p2 size 591360 extends beyond EOD, truncated [ 376.119446][T11768] loop2: p5 size 591360 extends beyond EOD, truncated [ 376.282712][T11778] syzkaller0: entered promiscuous mode [ 376.289155][T11778] syzkaller0: entered allmulticast mode [ 376.868343][ T28] audit: type=1400 audit(1775737250.902:3612): avc: denied { ioctl } for pid=11797 comm="syz.2.2100" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 376.961169][T11794] loop0: detected capacity change from 0 to 128 [ 377.077880][ T28] audit: type=1400 audit(1775737251.102:3613): avc: denied { append } for pid=11810 comm="syz.2.2103" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.157653][T11814] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2104'. [ 377.226946][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.239998][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.440119][ T28] audit: type=1400 audit(1775737251.472:3614): avc: denied { shutdown } for pid=11793 comm="syz.0.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 377.511078][ T28] audit: type=1400 audit(1775737251.532:3615): avc: denied { getopt } for pid=11826 comm="syz.9.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 377.694922][ T6845] kworker/u8:10: attempt to access beyond end of device [ 377.694922][ T6845] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 377.759741][T11835] loop0: detected capacity change from 0 to 1024 [ 377.778958][T11835] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 377.925664][T11836] syzkaller0: entered promiscuous mode [ 377.942917][T11835] loop0: detected capacity change from 0 to 4096 [ 377.959126][T11836] syzkaller0: entered allmulticast mode [ 377.967106][T11835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.034462][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.131654][T11842] loop9: detected capacity change from 0 to 512 [ 378.193030][T11842] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.244915][T11842] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.982569][T11859] loop0: detected capacity change from 0 to 512 [ 380.342332][T11865] loop2: detected capacity change from 0 to 512 [ 380.790702][T11859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.819724][T11865] EXT4-fs (loop2): first meta block group too large: 2 (group descriptor block count 1) [ 380.903338][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.977663][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.044728][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.084526][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'. [ 381.099461][ T28] audit: type=1400 audit(1775737255.132:3616): avc: denied { getopt } for pid=11870 comm="syz.6.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 381.116293][T11871] bpf: Bad value for 'gid' [ 381.139844][T11877] loop9: detected capacity change from 0 to 512 [ 381.140485][T11877] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 381.140683][T11877] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 381.145268][T11871] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2117'. [ 381.164723][T11877] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 381.379783][T11893] syzkaller0: entered promiscuous mode [ 381.385680][T11893] syzkaller0: entered allmulticast mode [ 381.399692][T11890] syzkaller0: entered promiscuous mode [ 381.405267][T11890] syzkaller0: entered allmulticast mode [ 381.603181][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 381.612626][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 381.642345][T11923] loop5: detected capacity change from 0 to 128 [ 381.666802][T11923] vfat: Unknown parameter 'L6tZ3/H2]NpIN+6LR/u' [ 381.727817][T11927] pimreg: entered allmulticast mode [ 381.812146][T11933] loop9: detected capacity change from 0 to 512 [ 381.819538][T11932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2139'. [ 381.863984][T11933] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.890684][T11933] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.992116][T11942] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2143'. [ 382.050876][T11945] loop0: detected capacity change from 0 to 512 [ 382.078528][T11945] EXT4-fs: Invalid want_extra_isize 5 [ 382.086214][T11933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.248273][T11949] loop2: detected capacity change from 0 to 2048 [ 382.275715][T11949] EXT4-fs: Ignoring removed oldalloc option [ 382.416324][T11949] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 382.424747][T11949] System zones: 0-7 [ 382.434285][T11949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.562193][T11949] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.2144: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 382.618375][T11949] EXT4-fs (loop2): Remounting filesystem read-only [ 382.678346][T11955] EXT4-fs (loop5): invalid inodes per group: 50331680 [ 382.678346][T11955] [ 382.825136][T11959] syzkaller0: entered promiscuous mode [ 382.831322][T11959] syzkaller0: entered allmulticast mode [ 382.864990][T11971] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2150'. [ 382.876187][ T8330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.888055][T11971] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2150'. [ 382.924323][T11974] set_capacity_and_notify: 1 callbacks suppressed [ 382.924339][T11974] loop6: detected capacity change from 0 to 512 [ 382.950455][ T28] audit: type=1400 audit(1775737256.982:3617): avc: denied { connect } for pid=11975 comm="syz.9.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 382.955542][T11974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.983377][T11976] loop9: detected capacity change from 0 to 512 [ 383.002451][T11976] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 383.011742][T11974] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.064653][T11976] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 383.092853][T11976] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2153: bg 0: block 248: padding at end of block bitmap is not set [ 383.115382][T11986] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 383.127173][T11976] loop9: lost filesystem error report for type 5 error -117 [ 383.131181][T11976] Quota error (device loop9): write_blk: dquota write failed [ 383.138558][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 383.138580][ C1] EXT4-fs (loop9): last error at time 1775737257: ext4_validate_block_bitmap:441 [ 383.169162][T11976] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 383.183913][T11986] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 383.197402][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 383.207439][T11976] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.2153: Failed to acquire dquot type 1 [ 383.223480][T11976] loop9: lost filesystem error report for type 5 error -28 [ 383.224056][T11976] EXT4-fs (loop9): 1 truncate cleaned up [ 383.242592][T11976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 383.276260][T11986] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 383.303212][ T9234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 383.316473][T11986] bond2 (unregistering): Released all slaves [ 383.345833][ T6845] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 383.355071][ T6845] EXT4-fs error (device loop9): ext4_release_dquot:7062: comm kworker/u8:10: Failed to release dquot type 1 [ 383.367237][ T6845] loop9: lost filesystem error report for type 5 error -117 [ 383.402082][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.421160][T11990] xfrm0 speed is unknown, defaulting to 1000 [ 383.435989][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.509754][ T28] audit: type=1400 audit(1775737257.532:3618): avc: denied { ioctl } for pid=12008 comm="syz.0.2162" path="socket:[34056]" dev="sockfs" ino=34056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 383.539934][ T369] geneve0: left allmulticast mode [ 383.544987][ T369] geneve0: left promiscuous mode [ 383.549762][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.554887][ T369] bridge0: port 3(geneve0) entered disabled state [ 383.572052][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 383.590124][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.602335][ T28] audit: type=1400 audit(1775737257.622:3619): avc: denied { write } for pid=12013 comm="syz.5.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 383.602511][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.634402][ T369] bridge_slave_0: left allmulticast mode [ 383.643917][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.652420][ T369] bridge_slave_0: left promiscuous mode [ 383.661678][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.669810][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.681782][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.693804][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.705987][ T6652] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 383.722617][ T369] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 383.781985][ T369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.791671][ T369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.801417][ T369] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 383.814908][ T369] bond0 (unregistering): Released all slaves [ 383.823462][ T369] bond1 (unregistering): Released all slaves [ 383.831951][ T369] bond2 (unregistering): Released all slaves [ 383.840376][ T369] bond3 (unregistering): Released all slaves [ 383.850153][ T369] bond4 (unregistering): Released all slaves [ 383.858354][ T369] bond5 (unregistering): Released all slaves [ 383.867368][ T369] bond6 (unregistering): Released all slaves [ 383.875916][ T369] bond7 (unregistering): Released all slaves [ 383.884281][ T369] bond8 (unregistering): Released all slaves [ 383.893846][T11990] lo speed is unknown, defaulting to 1000 [ 383.903208][T12001] xfrm0 speed is unknown, defaulting to 1000 [ 383.943622][T12020] syzkaller0: entered promiscuous mode [ 383.949759][T12020] syzkaller0: entered allmulticast mode [ 383.999550][T12001] lo speed is unknown, defaulting to 1000 [ 384.132080][T11990] chnl_net:caif_netlink_parms(): no params data found [ 384.135830][ T6964] smc: removing ib device syz1 [ 384.151520][ T6652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.314870][T11990] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.323409][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.330804][T11990] bridge_slave_0: entered allmulticast mode [ 384.337958][T11990] bridge_slave_0: entered promiscuous mode [ 384.381805][T11990] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.389684][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.397269][T11990] bridge_slave_1: entered allmulticast mode [ 384.404625][T11990] bridge_slave_1: entered promiscuous mode [ 384.450792][T11990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.494833][T11990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.516214][T12084] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 384.574747][T12064] lo speed is unknown, defaulting to 1000 [ 384.585207][T11990] team0: Port device team_slave_0 added [ 384.598313][T11990] team0: Port device team_slave_1 added [ 384.622497][T12098] loop0: detected capacity change from 0 to 512 [ 384.630347][T12098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 384.638564][T12098] System zones: 1-12 [ 384.647535][T12098] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.2173: corrupted in-inode xattr: e_value size too large [ 384.651139][ T369] tipc: Left network mode [ 384.667028][T12098] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 384.667240][T12098] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2173: couldn't read orphan inode 15 (err -117) [ 384.676579][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 384.676601][ C0] EXT4-fs (loop0): initial error at time 1775737258: ext4_iget_extra_inode:5040: inode 15 [ 384.676646][ C0] EXT4-fs (loop0): last error at time 1775737258: ext4_iget_extra_inode:5040: inode 15 [ 384.715154][T12098] loop0: lost filesystem error report for type 5 error -117 [ 384.718438][T12098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.738670][T11990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.746557][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.774754][T11990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.796324][T11990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.812146][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.880632][T11990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.958932][ T369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.980873][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.126508][ T369] team0 (unregistering): Port device team_slave_1 removed [ 385.136995][ T369] team0 (unregistering): Port device team_slave_0 removed [ 385.204177][ T6845] smc: removing ib device lyz2 [ 385.364086][T11990] hsr_slave_0: entered promiscuous mode [ 385.401914][T11990] hsr_slave_1: entered promiscuous mode [ 385.431026][T11990] debugfs: 'hsr0' already exists in 'hsr' [ 385.454353][T11990] Cannot create hsr debugfs directory [ 385.691044][ T6845] ================================================================== [ 385.699253][ T6845] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 385.708361][ T6845] [ 385.710676][ T6845] write to 0xffffc9000180fb58 of 1 bytes by task 12130 on cpu 0: [ 385.718469][ T6845] rwsem_down_write_slowpath+0x3c9/0xa90 [ 385.724512][ T6845] down_write+0xab/0xc0 [ 385.728658][ T6845] kernfs_activate+0x50/0x220 [ 385.733424][ T6845] kernfs_add_one+0x212/0x280 [ 385.738102][ T6845] __kernfs_create_file+0x145/0x180 [ 385.743319][ T6845] sysfs_add_file_mode_ns+0x132/0x1b0 [ 385.748684][ T6845] internal_create_group+0x441/0x9e0 [ 385.753962][ T6845] sysfs_create_groups+0x3f/0xf0 [ 385.758891][ T6845] ib_setup_port_attrs+0x9ea/0x1400 [ 385.764083][ T6845] add_one_compat_dev+0x297/0x390 [ 385.769181][ T6845] rdma_dev_init_net+0x1b9/0x240 [ 385.774117][ T6845] ops_init+0x22a/0x2e0 [ 385.778261][ T6845] setup_net+0x9f/0x230 [ 385.782431][ T6845] copy_net_ns+0x310/0x450 [ 385.786843][ T6845] create_new_namespaces+0x20e/0x440 [ 385.792122][ T6845] unshare_nsproxy_namespaces+0xe6/0x120 [ 385.797758][ T6845] ksys_unshare+0x3f2/0x6f0 [ 385.802355][ T6845] __x64_sys_unshare+0x1f/0x30 [ 385.807206][ T6845] x64_sys_call+0x1cef/0x3020 [ 385.811963][ T6845] do_syscall_64+0x12c/0x370 [ 385.816548][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.822440][ T6845] [ 385.824748][ T6845] read to 0xffffc9000180fb58 of 1 bytes by task 6845 on cpu 1: [ 385.832365][ T6845] rwsem_down_write_slowpath+0x43d/0xa90 [ 385.838011][ T6845] down_write+0xab/0xc0 [ 385.842168][ T6845] kernfs_remove_by_name_ns+0x5c/0xf0 [ 385.847625][ T6845] sysfs_remove_group+0xa5/0x170 [ 385.852585][ T6845] sysfs_remove_groups+0x3a/0x80 [ 385.857515][ T6845] ib_free_port_attrs+0x8e/0x260 [ 385.862479][ T6845] disable_device+0x1c0/0x260 [ 385.867268][ T6845] __ib_unregister_device+0x1fb/0x2d0 [ 385.872638][ T6845] ib_unregister_work+0x19/0x30 [ 385.877575][ T6845] process_scheduled_works+0x513/0xa10 [ 385.883052][ T6845] worker_thread+0x58a/0x780 [ 385.887744][ T6845] kthread+0x22a/0x280 [ 385.891817][ T6845] ret_from_fork+0x150/0x360 [ 385.896495][ T6845] ret_from_fork_asm+0x1a/0x30 [ 385.901610][ T6845] [ 385.903930][ T6845] value changed: 0x00 -> 0x01 [ 385.908601][ T6845] [ 385.910910][ T6845] Reported by Kernel Concurrency Sanitizer on: [ 385.917234][ T6845] CPU: 1 UID: 0 PID: 6845 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(full) [ 385.928527][ T6845] Tainted: [W]=WARN [ 385.932410][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 385.942456][ T6845] Workqueue: ib-unreg-wq ib_unregister_work [ 385.948471][ T6845] ================================================================== [ 386.053367][T12064] chnl_net:caif_netlink_parms(): no params data found [ 386.192372][T12064] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.201485][T12064] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.209503][T12064] bridge_slave_0: entered allmulticast mode [ 386.216140][T12064] bridge_slave_0: entered promiscuous mode [ 386.222833][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.230530][T12064] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.238130][T12064] bridge_slave_1: entered allmulticast mode [ 386.244675][T12064] bridge_slave_1: entered promiscuous mode [ 386.264641][ T369] IPVS: stop unused estimator thread 0... [ 386.279085][T12064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.290262][T12064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.319003][T12064] team0: Port device team_slave_0 added [ 386.326242][T12064] team0: Port device team_slave_1 added [ 386.342428][T12064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.349501][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.375941][T12064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.389686][T12064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.397095][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.424728][T12064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.456640][T12064] hsr_slave_0: entered promiscuous mode [ 386.462637][T12064] hsr_slave_1: entered promiscuous mode [ 386.468627][T12064] debugfs: 'hsr0' already exists in 'hsr' [ 386.474353][T12064] Cannot create hsr debugfs directory [ 386.717220][ T369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.726641][ T369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.736149][ T369] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 386.745410][ T369] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 386.755614][ T369] bond0 (unregistering): Released all slaves [ 386.763045][ T369] bond1 (unregistering): Released all slaves [ 386.771287][ T369] bond2 (unregistering): Released all slaves [ 386.779239][ T369] bond3 (unregistering): Released all slaves [ 386.787462][ T369] bond4 (unregistering): Released all slaves [ 386.795039][T11990] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.809257][T11990] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.825555][T11990] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.841517][T11990] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 386.860646][ T369] hsr_slave_0: left promiscuous mode [ 386.866514][ T369] hsr_slave_1: left promiscuous mode [ 386.872468][ T369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.882075][ T369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.893273][ T369] pim6reg (unregistering): left allmulticast mode [ 386.910966][ T369] team0 (unregistering): Port device macvlan1 removed [ 386.924479][ T6845] smc: removing ib device syz0 [ 386.945442][ T369] team0 (unregistering): Port device team_slave_1 removed [ 387.083391][T11990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.097641][T11990] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.109652][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.116791][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.143124][T11990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.153895][T11990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.167128][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.174251][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.195550][ T369] IPVS: stop unused estimator thread 0... [ 387.257202][T11990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.330895][T11990] veth0_vlan: entered promiscuous mode [ 387.339408][T11990] veth1_vlan: entered promiscuous mode [ 387.356640][T11990] veth0_macvtap: entered promiscuous mode [ 387.363933][T11990] veth1_macvtap: entered promiscuous mode [ 387.376650][T11990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.388232][T11990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.399335][ T369] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.417916][ T369] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.434363][ T369] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.448084][ T369] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.806780][T12064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 387.816513][T12064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 387.825423][T12064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 387.834605][T12064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 387.882847][T12064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.896581][T12064] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.906410][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.913491][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.933518][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.940620][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.958382][T12064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.012277][T12064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.093535][T12064] veth0_vlan: entered promiscuous mode [ 388.102199][T12064] veth1_vlan: entered promiscuous mode [ 388.122370][T12064] veth0_macvtap: entered promiscuous mode [ 388.130535][T12064] veth1_macvtap: entered promiscuous mode [ 388.145461][T12064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.157762][T12064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.168690][ T369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.178322][ T369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.191107][ T369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.201608][ T369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0