last executing test programs: 3m1.108245684s ago: executing program 1 (id=3105): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x565a03, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x9af6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, 0x200, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000c0000000000bc26000000000000bf67000000000000150300000ee600f0500200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500"/123], &(0x7f0000000100)='GPL\x00', 0x1ffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36}, 0x94) get_mempolicy(&(0x7f0000000000), &(0x7f0000000140), 0x2, &(0x7f0000587000/0x1000)=nil, 0x6) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @loopback, 0xfff}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioperm(0xfa, 0x0, 0xa) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001800010027bd7000fddbdf251d010600080005000600ff07150003000300000005000000025f9f22b600145a05"], 0x48}}, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x53) getdents(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001240)={0x0, 0x1000, "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"}, &(0x7f0000002280)=0x1008) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000022c0)={r5, 0x6}, &(0x7f0000002300)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x894a, &(0x7f0000000900)={'team_slave_0\x00', @random='\x00\x00\x00 \x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000700)="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", 0x13d}], 0x1) 3m0.557755257s ago: executing program 1 (id=3108): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x14}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x5, 0x5}, {0x4, 0x9}}, [{0x8, 0xb, 0x5f40}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xf43c}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd}, 0x48000) write$cgroup_subtree(r0, 0x0, 0x31) 3m0.39754269s ago: executing program 1 (id=3109): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x58, 0x0, 0x3}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 3m0.378026391s ago: executing program 1 (id=3110): r0 = socket(0x1e, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x0, 0x0}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") sendmsg$sock(0xffffffffffffffff, 0x0, 0x8080) move_mount(r1, 0x0, r1, 0x0, 0x76) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000f80)=@req3={0xfffffffb, 0x4, 0x1, 0x3, 0x2, 0xfffffffc, 0x1}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(0xffffffffffffffff, r2, 0x80000) recvmsg$can_j1939(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYRESOCT=r2], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c0000006902746e63667c53c8821b2f060a0b0400000000000000000200000028000480240001800b0001006578746964720000140002800800074000000005080006400000000109f4001d73797a00000000000900020073797a320000000005001400000011000100000000000000000000000041e1dfb7c756f3"], 0x84}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000190d0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18eaba5d4bbcf30f000005000000000000002d80", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x63, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x4ab, 0x5}, &(0x7f0000000a00)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000b80)={r7, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x3}, 0x90) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m0.002201279s ago: executing program 1 (id=3114): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket$inet(0x2, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="19"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x2000860) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x2f) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0xc00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2m58.824891956s ago: executing program 1 (id=3119): timer_create(0x1, &(0x7f0000000100)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r2, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0xfc}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e65740000000500010007000000050005000a0000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x24064800}, 0x0) 2m58.567127372s ago: executing program 32 (id=3119): timer_create(0x1, &(0x7f0000000100)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r2, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0xfc}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e65740000000500010007000000050005000a0000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x24064800}, 0x0) 2m14.20785034s ago: executing program 5 (id=3318): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = memfd_create(0x0, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="1800000072006bcd9e3fe3de6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2m14.136251302s ago: executing program 5 (id=3320): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c2000000000000113aed86dd6745207f003800000001ff00000000000000ff020000000000000000000000000001010190786000000067e816"], 0x0) 2m14.013340834s ago: executing program 5 (id=3322): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) r2 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1}, 0x536a}], 0x1, 0x40000007, 0x0) 2m12.90126296s ago: executing program 5 (id=3325): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000540), 0x1, 0x59c, &(0x7f0000000600)="$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") r0 = creat(&(0x7f0000000040)='./file1\x00', 0x180) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x198, 0x4c, 0x1a, 0x0, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x0, 0x3, 0x9, 0x8, 0x41c4, 0x10ca}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/192) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat(r0, 0x0, 0x3918c2, 0x17c) lseek(r5, 0xfffffffffffffffc, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x92) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) semctl$GETALL(0x0, 0x0, 0xd, 0x0) sendfile(r1, r1, 0x0, 0xffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, 0x0, 0x24004094) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 2m10.753254488s ago: executing program 5 (id=3331): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x5, 0xfff5) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bond0\x00', @multicast}) r2 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[], 0x1, 0x1f5, &(0x7f0000000600)="$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") r3 = openat$incfs(r2, &(0x7f0000000080)='.pending_reads\x00', 0x2000, 0x115) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="1479", 0x2}, {&(0x7f0000000140)="41cd3505788851a1e9d63eca298cf31d23d3d77b3e142acefd5d2cfaa12df05ffb06dec161160a7d3e1dea42c84ec5b97ca9bb14e2502616d5e983d5aa730247cbd74656d7b5bb8438e4341aae9e81e35d0c68450afbf00cecde5cc8e8bcb196212038a3357f3bbfc68a7e4a1b2badda956806739405821b6a42ca830c7a0ce58e0b9a1325886acfe77dec4a472eaa3296efb03760bf7b4ec78c079889f7b072c04ee3a062f4c7b57bad09356069f87726e6bb0e8a3c9a698531c8dc3168dac8998ec8cd35da89e8cc8ec497c7c695b368ad732505f9f48314017b6dcaa5a68ada1d20ff1dc4e4", 0xe7}, {&(0x7f00000003c0)="29523e4d2f956c4d88cce6a807e85be631", 0x11}], 0x3}}], 0x1, 0x20008000) recvfrom(r4, &(0x7f0000001640)=""/249, 0xf9, 0x40000161, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\f\x00\r', @ANYRES16=r2, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="888bc7ab5c44c6f448b590a39bc08591c514796a6d82a22326642ae76152ef6faf6e6740a7e3b42a283c24f09e5a41c95735cb85f600fa4afa0e17c0ffd08e83726fbf9db1dd6e958a47cf819859e60b1d9a8ee75cf44eae791537ca74ab8a83931b0ea7b40fded894ab98da3a47817af1de4c637892bb72616643d06c3e6fc9be6aec33faedcca009b457b5536716b89d32fc6ab45d60a5db63f42fd98e", @ANYRESDEC=r2], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) 2m8.742030094s ago: executing program 5 (id=3341): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2004814, &(0x7f00000004c0)=ANY=[@ANYBLOB="63727566742c6e6f726f636b2c6d61703d6f66662c6e6f726f636b2c6d61703d61636f726e2c756e686964652c6d61707d6e6f726d616c2c6769643de2fc3d3e0ed128401ec0da9bee846f7f23672ce09ca8c18c4b749bff06ee520c6735b1bec08bd6a35feb9a69240fb2682b3e0becd5fdf4d42939c295e15093a043a0bdea910258538492019e1e", @ANYRESHEX=0xee01, @ANYBLOB=',dmode=0x0000000000000006,nocompress,nojoliet,norock,map=acorn,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x81, 0xa72, &(0x7f0000001500)="$eJzs3U9sXVdeB/DvfbYTxzMkmU4opWqbl5RkPB3j2M40IepiSOyX1IP/INuRGrGYzEwcFGIoTEBqI6SkG1ZUIIFYwK5iBQsqzYbZoG4Q7GDFAqnqin3FKqyM7rvP8bP9np/jOnaSfj7W87v33N8953ffu/cevz++JzxfVo9tmFtdbd52Mv9RW1nL9X/Yh4x5hl2Z+uKTTz8ubx89zKH05e3in5PBJPWkP8krycDk1ML87OHtK7qb3EzyWVIkKYOLneZwM8Vf5Jvr85+l+Luy3a4O7bRmelnla+2g9z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWFZNTY2PjxaFMz11/r15J6ltMTi3MF1ld3bpkbZ3KL5qjfhe/6NluUpS3DA6uDfX9yon1xS8nqZ/Oa9Xca80ByTOY+994+fg73+6vra3fLZuv5PCOqk2tyu3uj1dWln/WPW71QRW3hwk+O6415qYX56dnL19r1KcX5+uXLlwYO/fu1cX61emZxuKNxaXGbH1yoXF5aX6hPjz53fr4pUvn643RG/PX565Njc401gov/vrE2NiF+g9Hf7txeWFxfu7cD0cXJ9+dnpmZnrvWjCkXlzEXyx3xt6aX6kuNy7P1+u07K8vnN+XUt/nBLoPGe21JGTTRI6Y/YxMT4+MTE+MftUbPnlgruPD2pbcvjo31j22SLRFPaafl2XKk+9O8l6dv+EpqVf+f35vJdOZyPe+l3vFnMlNZyHxmuyxvWev/z5xrbNtue//f6uX72xa/Wv46nTdas4Ot/v+XkrT3/11y2b+fe/kw93M3P85KVrKcnx14Rvv7cy2NzGU6i5nPdGZzuVlSb5XUcykXciFj+VHezckspp6rmc5MGlnMjSxmKY3mHjWZhTRyOUuZz0LqGc5kvpt6xnMpl3I+9TQymhuZz/XM5VqmcrlZy+3caT7u57fJ8XHQePeg8o+5Kmhim5o2d+blvv5k/X/jRf1LkB3b+5M47NJqq/8/tKm8b2vo8OR+JQUAAADsqV/99xw98dK/fZ4Ueb35vvzV6ZnGDw46LQAAAGAPNb+u91p5N1BOvT7YfP0/dtBpAQAAAHuoaP6PXZFkKCerqbV/l/ImAAAAALwgmp//v5Hi5HqB1/8AAADwgul9jf2eEcXI2uV/67eq+1utiGquKDI90xidnJ95Zzxnm1cZSPJ6W20zSWrNaw4WA81/P3grp6qoU0PV/dB6jWWbg2XU+Og743krp1sbMvxmeffmcIfIiSryO1Xkd9oj+7Ih8nwZCQAvutOd+uMn7P/fykgVMfJqs8vvf7VDHzymZwWAZ8XjMXb+rzWkWYf+vxXxRrf+//vbvP4vI17K7ZPVVwpG89O8n5Xcykha3zg42anWQ63R9aqvIYz0eDdgqPWVhf+8WMvIlvcDBh9va3vsciYysv6OwE9a71VsrLdYy+F8tbTDoAgA8Dw6vW0/vLP+f6TH6/8hXykEgGfKvQ/vVyPY3/vw/uqD1sTjkvWJobaSB11i1idaY+OnKjngTQQANlnvtw86EwAAAAAAAAAAAAAAAAAAAAAAAAAAAHhxbLhu/5FW4eZL+v/H2WRlZTnpcdn/PZ0Y7JTh7iZq2aecD3yiL8neVFg+/DsO/tey0R/kidsa7LCzPcHEPx5prf4/B//I73qiSLIH9WSvEzvAkxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7pkj6OpXXksNJxpKc2/+snp6HB53AXqkf2tVqxaM8ygc5uuf5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8zbWu/19Ldf+Nqij9teRMkptJfuegc9xLjw46gaej6B3y+1Xg+vX/a8lAVov0V097ioHJqYX52bKq4nC5/ItPPv24vPWue+uoCmUFZQvlTrXwOMuqhbawgY1rfau51n+15upTV5o75pWlqzNTs9cWfnM98OXi59W4FfW2tdfy/dMz//KXbcWHqiyKn5db2lnV7tDU8r27f/z+H9anrjbbndra7q9sXK/Yrt0duLOyPFG2tNR4b/MoHC/lVPLmcDK8cQt/t7x1aenU5sdzU7ZfFn9WHM3f5GaOtnaYYrUoH5xjze0/cvvOyvLoT99fudXKaelPHtz5oK2C4zmZ5FYy2CGnf+qc08nu+2Zzr6sNlK2ONYPKXyd6bOO22mocf7wNf7BhG77V3GWGOm9DlzbrPY6vHo97K6PzHTP6qz/6ds52fqaPpGtGZ3u02FHxZfHfxeajtfZ5qlN9h6OzQxXNyLY9pX3ZhsOrVkU2t3yifcGPNtfZ9ajkKfjz/CS/8Xj8l1rb+b/1XHU5bvb4fNTWYufjIul6XHRt8e+PbelR1jV7pBObhjtqnX26rdPK80QV1SXPX873qjqf4IzyvV49do/1d3v8/20xnP/NQ+P/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz74i6UuyenhTeS05k+R4kmPlfD1Z3bzuw120Vxsqdp3rXthNzs+fouuGFo/yKB/k6H5nBAAAAAAAAMDTcWXqi08+/bi8NT+P78uv1ZJ8v/qkvz/J8eKvByanFuZne1Q0kNxc+0h/8MlyuFn++ub6/Gfl3Cs9VjrYrw8AwHPt/wMAAP//HxhZHA==") sendmsg(0xffffffffffffffff, 0x0, 0x4000845) syz_ublk_setup_io_uring(0x6ace, &(0x7f00000005c0)={0x0, 0xf0c0, 0x20, 0x1, 0x2d9}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TCSETS(r3, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") timer_create(0x2, 0x0, &(0x7f0000044000)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 2m8.692072915s ago: executing program 33 (id=3341): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2004814, &(0x7f00000004c0)=ANY=[@ANYBLOB="63727566742c6e6f726f636b2c6d61703d6f66662c6e6f726f636b2c6d61703d61636f726e2c756e686964652c6d61707d6e6f726d616c2c6769643de2fc3d3e0ed128401ec0da9bee846f7f23672ce09ca8c18c4b749bff06ee520c6735b1bec08bd6a35feb9a69240fb2682b3e0becd5fdf4d42939c295e15093a043a0bdea910258538492019e1e", @ANYRESHEX=0xee01, @ANYBLOB=',dmode=0x0000000000000006,nocompress,nojoliet,norock,map=acorn,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x81, 0xa72, &(0x7f0000001500)="$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") sendmsg(0xffffffffffffffff, 0x0, 0x4000845) syz_ublk_setup_io_uring(0x6ace, &(0x7f00000005c0)={0x0, 0xf0c0, 0x20, 0x1, 0x2d9}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TCSETS(r3, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") timer_create(0x2, 0x0, &(0x7f0000044000)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 2m2.417225778s ago: executing program 6 (id=3365): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x4, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r5, 0x9) syz_io_uring_setup(0x2ba8, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@orlov}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) writev(r7, &(0x7f0000006ac0)=[{&(0x7f0000001a00)="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", 0xc01}], 0x1) pread64(r6, 0x0, 0x0, 0x1000000000) socket(0xa, 0x3, 0x3a) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x19) 2m0.002638783s ago: executing program 6 (id=3375): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x140301, 0x0) r2 = epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) preadv2(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/187, 0xbb}, {0x0}], 0x2, 0x1, 0x3e, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) r5 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000000000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000080)=[r5], 0x1) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0) r7 = io_uring_setup(0x27d0, &(0x7f0000000040)={0x0, 0x400c8df, 0x400, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newchain={0x8cc, 0x64, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0x0, 0xc}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x864, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_POLICE={0x820, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xff, 0x10001, 0x3, 0x7, 0x7037, 0x1, 0x3, 0xadd, 0x4, 0x9, 0x1, 0x4, 0x6, 0x4, 0x9, 0x0, 0x8, 0x1, 0x401, 0xac5, 0x6, 0x7, 0x10, 0x40, 0xaffc, 0xfffffff9, 0xc, 0x800, 0x7ff, 0x0, 0x15ad, 0x101, 0x8, 0x278, 0x1000, 0x9, 0x4, 0xec5, 0x8, 0x7, 0x108, 0x3, 0x7, 0x1, 0x3, 0x3, 0x7, 0x8, 0x0, 0x5, 0x100, 0x7f, 0xe, 0x101, 0x6, 0x7e, 0x8, 0x0, 0xd, 0x5, 0x7db, 0x0, 0xffff, 0x0, 0x61ce, 0x9, 0x7, 0x6, 0x6, 0xa91, 0x3, 0x37, 0xd19, 0x0, 0x0, 0x2, 0x3, 0xf, 0x7f, 0x9c7, 0x1, 0x3, 0x7, 0x6, 0x3ff, 0x7, 0x0, 0x1ff, 0x80000000, 0x2, 0x57e01e52, 0x4, 0x3, 0x1, 0x9, 0x5, 0x1, 0x9, 0x3, 0x200, 0x7, 0xfff, 0x7f, 0xfffffffe, 0x3, 0x7, 0x80, 0x8, 0x4, 0x2005, 0xe, 0x40000000, 0x5, 0x3, 0x3110, 0x7fff, 0x40, 0x19, 0xa00, 0xd, 0x3, 0x4, 0x4e, 0xffffffff, 0x7, 0xd, 0x7, 0x2800000, 0x40, 0x9, 0x8, 0x2, 0x9, 0x8, 0x491, 0x8, 0x4d0, 0x2, 0xff, 0x1, 0x2, 0xbd, 0x10, 0x7, 0x3, 0x1, 0x0, 0x7, 0xffffffff, 0x0, 0x8, 0x9, 0x6b2d, 0xfffffffa, 0xf7b6, 0x4, 0xa, 0xd1c, 0x5, 0x2, 0x2, 0x4, 0x1bee, 0xa, 0x1, 0x3, 0x6, 0x3ff, 0x4b, 0x40000, 0x7, 0xa, 0x9, 0x6, 0x0, 0xfffffffd, 0x40, 0x9, 0x2, 0x4, 0x9dd5, 0x7, 0x0, 0x5, 0x0, 0x0, 0xb, 0x1, 0x10001, 0x7, 0x5, 0xfffff001, 0x3, 0x9, 0x0, 0x3, 0x6, 0x400, 0x8, 0x3, 0x1000, 0x6, 0x0, 0x1, 0x0, 0x7, 0x9, 0x5, 0x382, 0x4, 0xe, 0x6, 0xff, 0x6, 0x800, 0x7, 0x2, 0x7, 0x2, 0xec86, 0x155e, 0x8, 0x6c, 0xb2c, 0xc, 0x6, 0x0, 0x6, 0x80000001, 0x6, 0x2, 0x4, 0xc, 0x1, 0x7f, 0x9, 0x7, 0x5, 0x0, 0x5, 0x9, 0x8000, 0x2, 0x40000000, 0x2, 0x80000001, 0xa, 0x1, 0x5, 0xa, 0x3, 0x8, 0x5, 0x8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe9e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x2, 0xfffffff7, 0x5, 0x9, 0x9, 0x4, 0x0, 0x3c7b, 0x7, 0xff, 0x0, 0x6, 0x5, 0x8, 0x0, 0xf4d, 0x0, 0x6, 0x2, 0x2, 0x7, 0x6, 0x2, 0x7, 0x8308, 0x1, 0xcc7, 0x8, 0x8, 0x4, 0x953f, 0x5, 0x1000, 0x3, 0x0, 0x65, 0x2, 0x5, 0x7, 0xc, 0x2, 0x5, 0x3ad0, 0x3, 0x3632, 0x5, 0x7, 0x401, 0x6, 0xf230, 0xfffffc01, 0x7, 0x6, 0x4, 0x3, 0x2, 0x6, 0x0, 0xfff, 0x26, 0x1, 0x3, 0x0, 0x7, 0xffff, 0x80000001, 0x401, 0x5, 0x7, 0x2, 0x6, 0x1, 0x4c2, 0xd9, 0xa4, 0x9, 0x7, 0x8, 0x7ff, 0x8, 0x127, 0x1, 0x3d2c, 0x3, 0x1, 0x6b, 0x7, 0x8001, 0x0, 0x4, 0x0, 0x10000, 0x7, 0x9, 0x5, 0x8, 0x7, 0x4, 0x5, 0x6014, 0xc2, 0x5, 0x10001, 0xfff, 0x1000, 0x1, 0x3, 0x8d1, 0x5, 0x401, 0xff, 0xffff, 0x4, 0x101, 0x2, 0x3, 0x80000000, 0x6fde, 0xc5b0, 0x0, 0x64d1, 0x7, 0x101, 0x4, 0xa49, 0x7, 0x709304b2, 0x7, 0x8, 0x8, 0x0, 0x101, 0x3, 0x13, 0x5, 0xf, 0xe, 0x80, 0xfffffff9, 0x1, 0xffff5ae2, 0x4, 0x4, 0xc8, 0x2, 0x2, 0xe, 0x1, 0x80000001, 0x9, 0x0, 0x5399, 0x1, 0x0, 0x3, 0x80000000, 0x80, 0xf, 0x6, 0x10001, 0xfffffff9, 0xb, 0x4, 0xcc, 0x4, 0x7ff, 0x69, 0x6, 0x4, 0x6, 0x10001, 0x740c, 0x7, 0x5, 0xea4a, 0x200, 0x4092, 0x0, 0x0, 0x800, 0x2, 0x4, 0x3, 0x1, 0x5, 0x2, 0x3, 0x7f, 0x800, 0xa, 0xc, 0x60a7, 0x7, 0xe, 0x5, 0x9, 0x4, 0x6c493442, 0xfffffffb, 0x80, 0x2, 0x81, 0x4, 0x2, 0x8, 0x2, 0x1, 0x4, 0x5196, 0x2, 0x7, 0x400, 0x2, 0xff, 0xec, 0x200, 0x6, 0x9, 0x1772, 0x2, 0x1, 0xaa9, 0x1, 0xcf, 0x8, 0x101, 0xfff, 0x3, 0x1, 0x6, 0x7ff, 0x76a5, 0x40, 0x80000000, 0x802, 0x1, 0xb6c0, 0x4, 0x3de8, 0x0, 0x2, 0x0, 0x4, 0xc, 0x8, 0xffff, 0xdb27, 0xfffffff1, 0x3, 0x40, 0x1ff, 0x10, 0x5]}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x3fc68054a149cf4e}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0xb3b2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa1}, @TCA_U32_LINK={0x8, 0x3, 0xffffffb8}, @TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_U32_HASH={0x8, 0x2, 0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0xc6}, @TCA_RATE={0x6, 0x5, {0x33, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040000) rmdir(&(0x7f0000000340)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f00000002c0)=0x0) setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)=@v3={0x3000000, [{0x11, 0x3f8000}, {0x5, 0x8}], r9}, 0x18, 0x1) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000019}) poll(&(0x7f00000003c0)=[{r2, 0x3021}], 0x1, 0x50c04000) 1m58.729502382s ago: executing program 6 (id=3390): syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000004080)={0xffffffffffffffff, 0x5, 0x0, 0x2}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x35c5, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r5, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f00000040c0)={r1, 0x0, 0x80000001, 0x6, 0x2}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") pipe(&(0x7f00000000c0)) 1m58.261223242s ago: executing program 6 (id=3394): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") r0 = open(&(0x7f0000000080)='./bus\x00', 0x66842, 0x90) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = timerfd_create(0x2, 0x81000) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x38}}]}, 0xfe, 0x4af, &(0x7f0000000940)="$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") r4 = open(&(0x7f0000000540)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, 0x0, 0x0) timer_getoverrun(0x0) ioprio_get$pid(0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xe200, 0x0, 0x0, 0x3, 0x7fffffff, 0x40043, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000), 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x10000}) clock_gettime(0x5, &(0x7f0000000100)) 1m57.960898029s ago: executing program 6 (id=3397): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x10, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x8c0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x4000000000, 0x800, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000580)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) futex(&(0x7f0000000200)=0x2, 0x0, 0x1, 0x0, 0x0, 0x2) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1m57.645589126s ago: executing program 6 (id=3404): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0xfd, 0xb, 0x6ba8, 0x1, @empty, @private2, 0x8, 0x7, 0x7fffffff, 0x1000}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0x29) splice(r4, &(0x7f0000000040)=0x10, r6, 0x0, 0x807, 0x0) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="04", 0x11}], 0x1, 0x7) mknodat$loop(r6, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) 1m57.645469416s ago: executing program 34 (id=3404): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0xfd, 0xb, 0x6ba8, 0x1, @empty, @private2, 0x8, 0x7, 0x7fffffff, 0x1000}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0x29) splice(r4, &(0x7f0000000040)=0x10, r6, 0x0, 0x807, 0x0) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="04", 0x11}], 0x1, 0x7) mknodat$loop(r6, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) 1m51.709790962s ago: executing program 4 (id=3444): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x104, 0x100, 0x400}}) 1m51.517624605s ago: executing program 4 (id=3446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2077, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresgid(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x27ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x41, &(0x7f0000009b00)={0x0}}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) write(0xffffffffffffffff, &(0x7f0000000000)="fc00000048", 0x5) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4) socketpair$unix(0x1, 0xf, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010825bd7000ffe3df250600000008000d008a000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x80080}, 0x1040) 1m51.255186982s ago: executing program 4 (id=3447): prctl$PR_SVE_SET_VL(0x32, 0x3dbf2) 1m51.168044694s ago: executing program 4 (id=3448): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x6, 0x7}, 0x2) 1m51.147607744s ago: executing program 4 (id=3449): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x85, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330281ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17df", 0x0, 0xfb, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80f5ff00000000", @ANYRESDEC], 0xffdd) 1m50.933198789s ago: executing program 4 (id=3450): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) getpid() (async, rerun: 32) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000004c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000002140)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, &(0x7f0000000580)=""/186, 0xba}, 0x40}, {{&(0x7f0000000640)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001740)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/66, 0x42}], 0x2}, 0x7}, {{&(0x7f0000001780)=@l2, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000380)=""/61, 0x3d}], 0x2, &(0x7f0000001900)=""/178, 0xb2}, 0xffffffff}, {{&(0x7f00000019c0)=@nl=@proc, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)=""/186, 0xba}}, {{&(0x7f0000001e00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001e80)=""/193, 0xc1}], 0x1, &(0x7f0000001fc0)}, 0xf}, {{&(0x7f0000002000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002080)=""/96, 0x60}], 0x1}, 0xfffffffb}], 0x6, 0x2, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0x30, 0x1, 0x0, 0x3, 0x0, 0x4, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000002, 0x266c}, 0x10edcc, 0x1224, 0x1000, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_config_ext={0x9, 0x200}, 0x10c0e8, 0x3, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) (async) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r9, &(0x7f00000001c0)=ANY=[], 0x69) (async) close(r9) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="020000000400000008000000016a092ffc6ced36a336d83a063d3400000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000007000000200000000900000000000000", @ANYRES32, @ANYBLOB="000100000000000000000000006b884b253e04e2", @ANYRES32=r8, @ANYRES32, @ANYRES64=r2], 0x50) dup2(r10, 0xffffffffffffffff) 1m49.652607738s ago: executing program 0 (id=3469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x8000000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x10) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001d80), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x2000000000000006) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x734, 0x0, 0x0) 1m48.767887718s ago: executing program 0 (id=3473): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x4, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r5, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@orlov}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) writev(r7, &(0x7f0000006ac0)=[{&(0x7f0000001a00)="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", 0xc01}], 0x1) pread64(r6, 0x0, 0x0, 0x1000000000) socket(0xa, 0x3, 0x3a) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x19) 1m46.598300737s ago: executing program 0 (id=3474): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x5}, 0x80, 0x35, 0x6, 0x8, 0x6, 0x6, 0x2400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000540)={0x30, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa9eaaaa60a2cb79915e661736d3aaaaaaff0800450000420064000000019078ac1414aaac1414aa0b009078030b00004800000000000000008900000a01010100000000862000b10bc5ee0b"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x6) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x49) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000800000ff0100000900000008890000", @ANYRES32=r2, @ANYBLOB="ff0f00"/20, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="0200000000000000030000000a00000000000000", @ANYRES32, @ANYBLOB], 0x50) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/60, 0x3c}], 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0xd00c8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a014400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00090f4e00014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) 1m45.921260153s ago: executing program 0 (id=3479): prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodioread_nolock}, {@jqfmt_vfsv1}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x80000000af49, 0x5}, 0x2402, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4114, 0x0, 0x0, 0x5, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4114, 0x0, 0x0, 0x5, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000810}, 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x5354c3, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x5354c3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x44c201, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa3}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) (async) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) (async) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) 1m45.325204486s ago: executing program 0 (id=3483): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x5, 0x9, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bind$x25(r0, &(0x7f0000003c40), 0x12) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000080)={'wg0\x00', @ifru_mtu=0x1}) 1m41.973257103s ago: executing program 0 (id=3487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90", 0x14}, {&(0x7f0000000300)="0400000002e877da3002473500000003467b", 0x12}, {&(0x7f0000000100)="1f000be73b3312802064cefd0d383884fdb2dd36", 0x14}], 0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0xff, 0x7fc00002}]}) getpid() prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x20003b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000001380)=""/205) 1m41.972896473s ago: executing program 35 (id=3487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90", 0x14}, {&(0x7f0000000300)="0400000002e877da3002473500000003467b", 0x12}, {&(0x7f0000000100)="1f000be73b3312802064cefd0d383884fdb2dd36", 0x14}], 0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0xff, 0x7fc00002}]}) getpid() prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x20003b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000001380)=""/205) 1m35.896777501s ago: executing program 36 (id=3450): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) getpid() (async, rerun: 32) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000004c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000002140)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, &(0x7f0000000580)=""/186, 0xba}, 0x40}, {{&(0x7f0000000640)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001740)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/66, 0x42}], 0x2}, 0x7}, {{&(0x7f0000001780)=@l2, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000380)=""/61, 0x3d}], 0x2, &(0x7f0000001900)=""/178, 0xb2}, 0xffffffff}, {{&(0x7f00000019c0)=@nl=@proc, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)=""/186, 0xba}}, {{&(0x7f0000001e00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001e80)=""/193, 0xc1}], 0x1, &(0x7f0000001fc0)}, 0xf}, {{&(0x7f0000002000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002080)=""/96, 0x60}], 0x1}, 0xfffffffb}], 0x6, 0x2, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0x30, 0x1, 0x0, 0x3, 0x0, 0x4, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000002, 0x266c}, 0x10edcc, 0x1224, 0x1000, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_config_ext={0x9, 0x200}, 0x10c0e8, 0x3, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) (async) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r9, &(0x7f00000001c0)=ANY=[], 0x69) (async) close(r9) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="020000000400000008000000016a092ffc6ced36a336d83a063d3400000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000007000000200000000900000000000000", @ANYRES32, @ANYBLOB="000100000000000000000000006b884b253e04e2", @ANYRES32=r8, @ANYRES32, @ANYRES64=r2], 0x50) dup2(r10, 0xffffffffffffffff) 6.053085912s ago: executing program 3 (id=4446): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) lsm_list_modules(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x6, 0x2ae7}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) mlockall(0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000f0000000000000000000a00000a20000000000a05290000000001000000070000000900010073797a300000000048000000090a01040000000000000000070000000900010073797a30000000000c00098008000140e0000000080005400000003c08000a4000000000090002"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x3ffe, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x29, 0x67fb, 0x7}, {0x100, 0x0, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x7b67, 0x4, 0x517, 0x1, 0x802}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x11, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x5, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x404}, {0xfffffff9, 0x6, 0xfffffffa, 0xc3, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x2, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x8, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x1000, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x107, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0xfffffffe, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x6, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x20009, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d2, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x80000009, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0xfffffffe, 0x3ff}, {0x5, 0x800, 0x2, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x4, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x2, 0x5}, {0x80000001, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x3a, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x1004}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x202, 0x39, 0x9d6, 0x5}, {0xb, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0x400, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x3, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x409, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0xfffffffe, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x7fd}, {0x8, 0xf, 0xa, 0x3, 0x8001, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0004, 0x2}, {0x401b, 0x7, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x3, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x400, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x2, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x100005, 0x106, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0xfffd}, {0xb, 0xd, 0x4000009, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="337c00000100000081"]) accept$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000001300)=0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 5.579243623s ago: executing program 3 (id=4452): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff0}, 0x0, 0x1, 0xbd6, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xaffffff7fffffffe, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@empty, @in=@rand_addr=0x64010101, 0x11, 0x71c, 0x4e23, 0xfb5, 0xa, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x1000000000000193, 0x9ba3, 0xffff, 0x0, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xf}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x5, 0x8, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000050}, 0x844) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) write$bt_hci(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r11) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0x2c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r14 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r8, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 5.25728623s ago: executing program 9 (id=4457): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 5.25695362s ago: executing program 3 (id=4458): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}, 0xa}]}, &(0x7f0000000000)=0x10) shutdown(r4, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x3ff, 0x1, 0x2, 0x40000000, 0x0, 0x9, 0x8, r5}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x4c}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r7, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.247702251s ago: executing program 9 (id=4459): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8f39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x9}, 0x10, 0x0, 0x4933, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000000a00)="c7", 0x1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000000)={0x2, 0x3}) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000002c0)=0x0) setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)=@v3={0x3000000, [{0x7, 0x3f8000}, {0x5, 0x8}], r4}, 0x18, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@delpolicy={0x1d8, 0x14, 0x200, 0x70bd29, 0x25dfdbfd, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x4e20, 0xfff, 0x4e22, 0x7, 0xda2651fc193bf0c5, 0x0, 0x80, 0x5e, r0, r4}, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in6=@empty, 0x4d3}, 0xa, @in6=@remote, 0x3502, 0x1, 0x1, 0x9, 0x1, 0x0, 0x7}, {{@in6=@local, 0x4d4, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3505, 0x2, 0x0, 0x6, 0x7, 0xe232, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x9, 0x2b}, 0xa, @in6=@empty, 0x3504, 0x2, 0x2, 0x4, 0x8, 0x101, 0x5}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x2b}, 0x2, @in=@local, 0x3503, 0x3, 0x3, 0x3, 0xbb06, 0x3, 0x4}]}, @srcaddr={0x14, 0xd, @in=@private=0xa010102}, @algo_crypt={0x53, 0x2, {{'cbc(aes)\x00'}, 0x58, "936dadbf33dd254e2e835f"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e24, @in=@empty}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x5df3, &(0x7f0000000000)={0x0, 0x3a2c, 0x80, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000000), 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x0, 0x1}, 0x20) 5.081717764s ago: executing program 8 (id=4460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x7, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xe, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.426340989s ago: executing program 2 (id=4466): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x3}, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xd}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x0, 0x100010, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xd000000) 4.277876273s ago: executing program 3 (id=4467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x40}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20040010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.175729915s ago: executing program 8 (id=4468): pipe(&(0x7f0000000500)) r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, 0x0) fchdir(r1) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') (fail_nth: 8) 4.073191438s ago: executing program 2 (id=4470): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 3.903593611s ago: executing program 8 (id=4471): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000340)={[{@sysvgroups}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000ac0)=@req={0x4, 0x8ce, 0x200, 0x2}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x224280, 0xd3) r2 = msgget$private(0x0, 0x460) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) msgctl$IPC_RMID(r2, 0x0) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x68, r5, 0x1, 0x70bd2b, 0x4000000, {{}, {}, {0x4c, 0x18, {0x4bc3, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x24048010) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2080d6, &(0x7f0000000140)={[{@nojournal_checksum}]}, 0x1, 0x4d7, &(0x7f0000000180)="$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") 3.881879062s ago: executing program 9 (id=4472): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0xfc, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x1, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @rand_addr, {[@lsrr={0x83, 0x3}, @ssrr={0x89, 0x3, 0xf1}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x1}, {@multicast1, 0x1}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 3.719170375s ago: executing program 3 (id=4473): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40) flistxattr(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x200000010000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x11) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 3.616087798s ago: executing program 9 (id=4474): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}, 0xa}]}, &(0x7f0000000000)=0x10) shutdown(r6, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x3ff, 0x1, 0x2, 0x40000000, 0x0, 0x9, 0x8, r7}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.433420402s ago: executing program 8 (id=4475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0xa4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x70, 0x2, [@TCA_MATCHALL_ACT={0x6c, 0x2, [@m_ife={0x68, 0x1, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff9}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 2.63680743s ago: executing program 2 (id=4476): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x41e, &(0x7f0000000140)={@empty, @random="30cebbab0924", @void, {@ipv6={0x86dd, @tipc_packet={0xf, 0x6, "4feb86", 0x3e8, 0x6, 0x1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[@fragment={0x2c, 0x0, 0x4, 0x0, 0x0, 0x5, 0x67}, @hopopts={0x6c, 0x11, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @generic={0xa, 0x1a, "601a82070c7353d4c3100538936fc8943f7bb92dbab74e487ca1"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7, 0x0, [0x3a, 0x7, 0x4, 0x5, 0x9, 0x1]}}]}, @dstopts={0x1, 0x63, '\x00', [@generic={0x0, 0xb4, "c9adc4f97473668ba7a13ed66b36e5876ff6479c23bdb708fb6ae45cb7d546b4f6f968277775842125af3f4c0d681c496c507e4accffafe0d4c1e6a185a0333e358621f9cc9a2cc3739c223e4b434dc573fbada48eca82d39da95c6c12000bf8894c34ded5974240f5329bf9493b11ab01e1815e9705ef069b177f0174dd8fb958cf4738dad3699f8c7a62a7e132bc553e0038b71cac89aa3a2a1b71549b3021d6c31b59f0f13e7b138920688798ffa63dc37204"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}}, @generic={0x20, 0x24f, "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"}]}], @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x2, 0x4000, 0x0, 0x2, 0x5, 0x2, 0x3, 0x7, 0x1, 0x2, 0x4e23, 0x4e21}, 0x0, 0x3}}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x574, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x548, 0x2, [@TCA_BPF_ACT={0x544, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x6, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1bc, 0x5, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa1, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae2b9f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036c"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x6, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_ct={0x9c, 0x18, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_MARK={0x8, 0x5, 0x101}, @TCA_CT_MARK={0x8, 0x5, 0x7f}]}, {0x16, 0x6, "1345b43e6aebc919cdceb2114ae4608ad809"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x574}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/119, 0x77}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/1, 0x1}], 0x8, &(0x7f0000000a40)=""/191, 0xbf}}], 0x400000000000289, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0x11) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x3e, 0x0, 0x0) sendmmsg$inet6(r6, 0x0, 0xfed1, 0x48d1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) syz_emit_ethernet(0xfe0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="000229bd7000fedbdf2509000000080001007063690011000200303030303a30303a31302e300000000008000300030000000800090002000000080001007063690011000100303030303a30303a31302e3000000000080003000200000008000900060000000e00011000000064657673696d0000000f0002006e657464657673696d30000008000300010000000800090001000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4c815}, 0x40040) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c0000000201010800000000000000000000000508001540000000010800084000000c2c080003400000100287f64a13e8c5b8bb4be2a93c8ca032306e897d91a28b98983d6d39a59ad2f0e3601ce6301b818893889076dfbc33fecf72922d928ec950975e8f2911e69126d1c52b82c94950a2c538371d127492b626895ced71599d5301b585e751b514847bc5d59337e8caf07f5d958e0a4676fa9b5e19b94cef404481260eed7f4cc986d6996cfa428585193b81ad5f1ca84c34fda529617cd8ae325b64e753274013b8141a9cb486ff6de717e3aa9be13448ff1fcbc423608dda402ebf377e073e22e31b5c3bafaa9b98100517d080553a5bf997faad"], 0x2c}, 0x1, 0x0, 0x0, 0x4002000}, 0x80) connect$inet(r0, &(0x7f0000000280)={0x2, 0x7, @multicast2}, 0x10) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read$usbfs(r8, 0x0, 0x0) 1.591375754s ago: executing program 7 (id=4477): unshare(0x2a020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 1.269317661s ago: executing program 2 (id=4478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x7, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xe, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 526.086008ms ago: executing program 7 (id=4479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 525.690398ms ago: executing program 3 (id=4480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r4, &(0x7f0000000180)="cf", 0x1) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) r5 = eventfd2(0xc, 0x800) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r4, 0x0, 0x0, 0x6, 0x0, 0x1, r5}]) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) 508.359218ms ago: executing program 9 (id=4481): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000079102800000000006900240000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000120000002400000024000000060000000000000000000002030000000000000000000009000000000400000000000012"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) 375.461281ms ago: executing program 9 (id=4482): r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x18, &(0x7f0000000000)={0x40, 0x3, 0x4}) ptrace$getenv(0x4201, r0, 0x9, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r4 = socket$kcm(0x2, 0x2, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x100000) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640), 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) writev(r5, &(0x7f00000024c0)=[{&(0x7f00000001c0)="c4ef", 0x2}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="3c840300000000002c0012800e000100697036677265746170000000188002801400070000000000000000000000ffffff00ffff0a000100aaba"], 0x58}, 0x1, 0x0, 0x0, 0x20010801}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r9 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) dup3(r9, r8, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r10, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x405c801) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x3}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r11, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000240012800b0001006d61637365630000140002800500070001000000050806000100000008000500", @ANYRES32=r7], 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 375.027431ms ago: executing program 8 (id=4483): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x6, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0xf}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="9e000206"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r10, 0x4, 0x42000) fcntl$setstatus(r10, 0x4, 0x4800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0x15, 0x1, 0x81, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r9, r8, 0x3, 0x3921ca3b1daa7fe2, r10, @void, @void, @value, @void, r11}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="000000001000000000000000", @ANYRES32=r5, @ANYBLOB="20e120f936353072f9f95a4236f571d68914fd5046923533e89a9cfa2c43abde475784c1a3b7276a7c5eea3addb71d428cb22088e11d82a6425998a8315900b9de917251e66b167af31b82884fdcdbe4b5a1eb3e7a5464aa4cab864d2693f14f26acb2c16ea58ffdaa7932bb003572a3bebc69f76587ad4aae0d8f664c133cc93df74c7dd7db9d86236f1d912ca74d41b94042c6d2f8b7d355a3918bafe6d17473892538572c64b1977be8da1175f8e27a9252a2a1619ffc12c58fb35248e50d64374fe77fd28030ba911c632ec61ced56eebb151a4273e3e8aea12585a3d287", @ANYRES64=r11], 0x20) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003b00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400d004}, 0x8890) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="44010000", @ANYRES64=r2, @ANYBLOB="08002cbd7000fbdbdf250b00000050000280060002004e220000066d02004e220000140001007f000001000000000000000000000000060002004e240000080004000300000006000f0005000000080005000a00000008000400ff0100000c000180060001000a00000008000600000000005c00028008000400080000000800040001000000060002004e24000008000500020000000800060080000000140001006401010200000000000000000000000014000100ffffffff00000000000000000000000008000900810001000800050000fcffff08000400000000804400028006000b000a0800080001000000080006001a0c0000060002004e21000008000900030000000800050000000000080004002508000005000f0000f5b63b7704ac33345c0a31d0bd0000000c0001800800050000000800080006"], 0x144}, 0x1, 0x0, 0x0, 0x8005}, 0x4000000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r13, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded72407080001"], 0x150}}, 0x0) 374.808081ms ago: executing program 2 (id=4484): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0xfc, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x1, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @rand_addr, {[@lsrr={0x83, 0x3}, @ssrr={0x89, 0x3, 0xf1}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x1}, {@multicast1, 0x1}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 333.656572ms ago: executing program 7 (id=4485): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000058c000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r3, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) r4 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) read(r4, 0x0, 0x0) r5 = msgget$private(0x0, 0x460) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x401, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x4, 0x555, 0x7, 0x1a, "00000000000700000000fffe00"}) r6 = syz_open_pts(0xffffffffffffffff, 0xc02) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0x1) msgsnd(r5, &(0x7f0000001180)=ANY=[@ANYBLOB="01"], 0x2000, 0x0) msgctl$IPC_RMID(r5, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081204", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd24, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200008d4}, 0x2000c004) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x84, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ad828ea09dee4e6acb2f8d66d6"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "034f6705596c8a1ef8ad88"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "d642b1"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3af5ff16d1"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040805}, 0x4000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 257.179634ms ago: executing program 2 (id=4486): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 185.945856ms ago: executing program 8 (id=4487): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8f39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x9}, 0x10, 0x0, 0x4933, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000000a00)="c7", 0x1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000000)={0x2, 0x3}) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000002c0)=0x0) setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)=@v3={0x3000000, [{0x7, 0x3f8000}, {0x5, 0x8}], r4}, 0x18, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@delpolicy={0x1d8, 0x14, 0x200, 0x70bd29, 0x25dfdbfd, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x4e20, 0xfff, 0x4e22, 0x7, 0xda2651fc193bf0c5, 0x0, 0x80, 0x5e, r0, r4}, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in6=@empty, 0x4d3}, 0xa, @in6=@remote, 0x3502, 0x1, 0x1, 0x9, 0x1, 0x0, 0x7}, {{@in6=@local, 0x4d4, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3505, 0x2, 0x0, 0x6, 0x7, 0xe232, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x9, 0x2b}, 0xa, @in6=@empty, 0x3504, 0x2, 0x2, 0x4, 0x8, 0x101, 0x5}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x2b}, 0x2, @in=@local, 0x3503, 0x3, 0x3, 0x3, 0xbb06, 0x3, 0x4}]}, @srcaddr={0x14, 0xd, @in=@private=0xa010102}, @algo_crypt={0x53, 0x2, {{'cbc(aes)\x00'}, 0x58, "936dadbf33dd254e2e835f"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e24, @in=@empty}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) r5 = io_uring_setup(0x5df3, &(0x7f0000000000)={0x0, 0x3a2c, 0x80, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000000), 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x0, 0x1}, 0x20) 173.978686ms ago: executing program 7 (id=4488): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}, 0x1, 0x0, 0x200000000000000}, 0x64000004) 34.368549ms ago: executing program 7 (id=4489): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r0, 0x0, {0x1, 0x1, 0x1}, 0xfd}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x2, 0xc, 0x401, 0x80000001, r4}, &(0x7f00000000c0)=0x10) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r4, 0x3}, &(0x7f0000000100)=0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000deffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r8 = socket(0x1e, 0x4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r13 = socket(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) preadv(r12, &(0x7f0000000400)=[{&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000540)=""/168, 0xa8}], 0x2, 0xa3, 0xfffffefc) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 0s ago: executing program 7 (id=4490): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendto(r0, &(0x7f0000001240)="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", 0x1000, 0x59, &(0x7f0000002240)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x1, 0x4, 0x34f, 0x0, 0xe311, 0x6}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x10, 0x0, 0x1, 0x7}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4000010) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000023c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0009000000000003000000000000000000000d00000000000000e00826f74201250b8852cd2e018ac66d9da2a6e3a715c2735342c71d4ed9f9759388a790f5e134a24e7521c237867df85ab603c22cf699d55795c45bab91b92a23c3638937ab731132afb8f3a4f1ecc79d338597e71b6417d3c1500c5e16d54f75a96d94f8d5a9c643a5034a4d937fafd97040573a2bdc55d5ce29dd1665a22e2885651dca0dbcf83fac7222c81e788de818fa0e3894928597b23b60ebcc2dc1bdc17d8225be67ebe51ea36351e01a49a142a30ed7b08cb3"], 0x0, 0x27}, 0x28) pselect6(0x66, 0x0, 0x0, &(0x7f00000010c0)={0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec775000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x200, 0x60000, 0x81}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000002380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008011) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, @perf_config_ext, 0x0, 0x201, 0x0, 0x7, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r7], 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000060000000000000007000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000049458a58daf8064052c32239860ba30f77d3766060ad0735c950d86ee08efc2c1e7215675161b87eeadac71b73d425782f5459c13a4e18b82646e711098ce2e97e8b2312f5e88d49c2f1207c6e07338c1dcb6d9761b08309250512ca1216068fb7ef97c1138a174391169bf48d83cc6c583eb2c3bac9749400e7ed85e2e15a574c8d2eee3aa7a0afb797b4e68bf4e55db77000"/195], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0xe, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000140)=[{0x3, 0x2, 0x5, 0x9}, {0x0, 0x3, 0x3, 0x2}, {0x1, 0x3, 0x10, 0x4}, {0x0, 0x5, 0xc, 0x9}, {0x2, 0x4, 0xc, 0x2}, {0x0, 0x1, 0xf, 0x6}, {0x4, 0x1, 0x10, 0x7}, {0x3, 0x1, 0xd, 0xa}], 0x10, 0x7}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000000)='./file0\x00', r8}, 0x18) kernel console output (not intermixed with test programs): tered blocking state [ 620.434348][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.547284][T15022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.580628][T16538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.871715][T16644] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 620.939660][ T28] audit: type=1400 audit(2000000368.418:3130): avc: denied { write } for pid=16642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.966607][T16644] bond1 (unregistering): Released all slaves [ 621.256562][T16667] sg_read: process 232 (syz.3.3501) changed security contexts after opening file descriptor, this is not allowed. [ 621.593746][T16674] loop3: detected capacity change from 0 to 1024 [ 621.669400][T16674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.775964][T15022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.967775][T16538] veth0_vlan: entered promiscuous mode [ 621.997544][T16538] veth1_vlan: entered promiscuous mode [ 622.040686][T16538] veth0_macvtap: entered promiscuous mode [ 622.064587][T16538] veth1_macvtap: entered promiscuous mode [ 622.092296][T16538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.122942][T16538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.149153][T11792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.159585][T11792] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.183199][T11792] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.203765][T11792] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.349444][T16698] loop8: detected capacity change from 0 to 512 [ 622.369115][T16698] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 622.405886][T16698] EXT4-fs (loop8): 1 truncate cleaned up [ 622.418518][T16698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.620095][T16708] loop7: detected capacity change from 0 to 256 [ 622.628672][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.657658][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3503'. [ 623.009409][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 623.071028][T16720] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.078073][T16720] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.085342][T16720] bridge_slave_0: entered allmulticast mode [ 623.092698][T16720] bridge_slave_0: entered promiscuous mode [ 623.101005][T16720] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.110358][T16720] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.117969][T16720] bridge_slave_1: entered allmulticast mode [ 623.125601][T16720] bridge_slave_1: entered promiscuous mode [ 623.187902][T16748] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3511'. [ 623.212442][T16748] program syz.7.3511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.234867][T16720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.246601][T16720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.280771][T16720] team0: Port device team_slave_0 added [ 623.289739][T16720] team0: Port device team_slave_1 added [ 623.336572][T16720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.343874][T16720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.370721][T16720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.383090][T16720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.390392][T16720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.416801][T16720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.461374][T16720] hsr_slave_0: entered promiscuous mode [ 623.474151][T16720] hsr_slave_1: entered promiscuous mode [ 623.480541][T16720] debugfs: 'hsr0' already exists in 'hsr' [ 623.486821][T16720] Cannot create hsr debugfs directory [ 623.684627][T16720] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 623.695963][T16720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.709585][T16720] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 623.721215][T16720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.927879][T16720] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 623.937175][T16720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.945612][T16720] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 623.954847][T16720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.999418][T16720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.012304][T16720] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.022329][T11799] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.029456][T11799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.057907][T11792] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.065046][T11792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.259134][T16773] loop2: detected capacity change from 0 to 512 [ 624.281506][T16758] loop8: detected capacity change from 0 to 512 [ 624.311822][T16773] EXT4-fs (loop2): orphan cleanup on readonly fs [ 624.324750][T16758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 624.344180][T16773] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 624.378110][T16758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.396697][T16773] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.3512: corrupted inode contents [ 624.421903][T16758] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.443205][T16773] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 624.443353][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 624.458943][ C1] EXT4-fs (loop2): initial error at time 2000000371: ext4_do_update_inode:5742: inode 15 [ 624.468805][ C1] EXT4-fs (loop2): last error at time 2000000371: ext4_do_update_inode:5742: inode 15 [ 624.556194][T16767] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3515'. [ 624.570968][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.580273][T16773] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.3512: mark_inode_dirty error [ 624.594880][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 624.594894][ T28] audit: type=1400 audit(2000000372.008:3138): avc: denied { write } for pid=16757 comm="syz.8.3514" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 624.638524][T16773] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 624.638751][T16773] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.3512: corrupted inode contents [ 624.676116][ T28] audit: type=1400 audit(2000000372.008:3139): avc: denied { append } for pid=16757 comm="syz.8.3514" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 624.723480][T16773] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 624.725206][T16773] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.3512: mark_inode_dirty error [ 624.768451][ T28] audit: type=1400 audit(2000000372.008:3140): avc: denied { map } for pid=16757 comm="syz.8.3514" path="/4/file0/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 624.782567][T16773] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 624.802727][T16773] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.3512: mark inode dirty (error -117) [ 624.805284][T16720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.813376][T16773] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 624.845802][T16773] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 624.861929][T16793] loop3: detected capacity change from 0 to 512 [ 624.872126][T16773] EXT4-fs (loop2): 1 orphan inode deleted [ 624.884373][T16791] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3516'. [ 624.889515][T16793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 624.893826][T16773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.944898][T16791] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 625.006120][T16791] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.025249][T16765] program syz.2.3512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.038682][T16765] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 625.062376][T16793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.133080][T16807] loop8: detected capacity change from 0 to 160 [ 625.142881][T16793] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.189712][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.318504][ T28] audit: type=1400 audit(2000000372.799:3141): avc: denied { create } for pid=16792 comm="syz.3.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 625.453414][T15022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.482301][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3522'. [ 625.522879][T16720] veth0_vlan: entered promiscuous mode [ 625.533843][T16720] veth1_vlan: entered promiscuous mode [ 625.581704][T16720] veth0_macvtap: entered promiscuous mode [ 626.553998][T16720] veth1_macvtap: entered promiscuous mode [ 626.599771][T16720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.724144][T16720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.913325][T16838] hub 8-0:1.0: USB hub found [ 626.920145][T16838] hub 8-0:1.0: 8 ports detected [ 627.562235][ T28] audit: type=1400 audit(2000000374.339:3142): avc: denied { read } for pid=16833 comm="syz.3.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 627.796935][T11802] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.810907][T11802] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.819674][ T28] audit: type=1400 audit(2000000374.569:3143): avc: denied { checkpoint_restore } for pid=16833 comm="syz.3.3525" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 627.850499][T11802] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.859610][T11802] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.014831][ T28] audit: type=1400 audit(2000000375.519:3144): avc: denied { mount } for pid=16839 comm="syz.8.3526" name="/" dev="autofs" ino=49021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 628.108103][ T28] audit: type=1400 audit(2000000375.619:3145): avc: denied { write } for pid=16851 comm="syz.8.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 628.161763][ T28] audit: type=1400 audit(2000000375.639:3146): avc: denied { ioctl } for pid=16851 comm="syz.8.3530" path="socket:[49039]" dev="sockfs" ino=49039 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 628.250984][ T28] audit: type=1400 audit(2000000375.759:3147): avc: denied { accept } for pid=16854 comm="syz.7.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 628.285367][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3531'. [ 628.446874][T16860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16860 comm=syz.3.3533 [ 628.459508][T16857] loop7: detected capacity change from 0 to 512 [ 628.503671][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3530'. [ 628.513042][T16857] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 628.525917][T16857] EXT4-fs (loop7): group descriptors corrupted! [ 628.735564][T16870] loop3: detected capacity change from 0 to 512 [ 628.742149][T16870] ext4: Unknown parameter 'abmemory.events' [ 628.797686][T16876] loop3: detected capacity change from 0 to 256 [ 628.988601][T16877] loop7: detected capacity change from 0 to 512 [ 629.013501][T16877] EXT4-fs: Ignoring removed orlov option [ 629.074457][T16876] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 629.191180][T16877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.732436][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 629.732456][ T28] audit: type=1400 audit(2000000376.729:3149): avc: denied { write } for pid=16863 comm="syz.7.3535" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 630.092590][T16887] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 630.131551][T16887] FAT-fs (loop3): Filesystem has been set read-only [ 630.328421][T16887] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 630.347836][T16898] netlink: 'syz.8.3544': attribute type 10 has an invalid length. [ 630.398488][T16901] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3543'. [ 630.435390][T16898] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 630.469746][T16898] bridge0: port 3(netdevsim2) entered blocking state [ 630.503713][T16898] bridge0: port 3(netdevsim2) entered disabled state [ 630.536948][T16898] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 630.581285][ T28] audit: type=1400 audit(2000000377.959:3150): avc: denied { recv } for pid=16895 comm="syz.8.3544" saddr=10.128.0.163 src=45474 daddr=10.128.0.101 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 630.610101][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.670359][T16887] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 631.165666][ T28] audit: type=1400 audit(2000000378.679:3151): avc: denied { read } for pid=16895 comm="syz.8.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 631.252428][T16913] xt_l2tp: v2 doesn't support IP mode [ 631.414905][T16910] loop3: detected capacity change from 0 to 8192 [ 631.514672][ T28] audit: type=1400 audit(2000000379.029:3152): avc: denied { getopt } for pid=16909 comm="syz.3.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 631.637833][T16921] loop2: detected capacity change from 0 to 512 [ 631.645077][T16921] EXT4-fs: Ignoring removed orlov option [ 631.660715][T16910] loop3: p2 p3 [ 631.673599][T16910] loop3: p3 start 117440512 is beyond EOD, truncated [ 631.815299][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3549'. [ 631.987212][T16921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.127763][ T28] audit: type=1400 audit(2000000379.499:3153): avc: denied { write } for pid=16915 comm="syz.2.3548" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 632.555753][T16923] gretap1: entered allmulticast mode [ 632.584305][ T28] audit: type=1400 audit(2000000380.099:3154): avc: denied { create } for pid=16931 comm="syz.9.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 632.631366][T16932] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3552'. [ 632.640545][T16932] openvswitch: netlink: Message has 6 unknown bytes. [ 632.647810][T16930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3551'. [ 633.430185][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.554910][T16948] netlink: 'syz.7.3557': attribute type 30 has an invalid length. [ 633.587070][ T28] audit: type=1400 audit(2000000381.100:3155): avc: denied { kexec_image_load } for pid=16944 comm="syz.9.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 633.589362][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3558'. [ 633.633474][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3558'. [ 633.684558][T16954] 9p: Could not find request transport: xen [ 633.988710][T16962] xt_ecn: cannot match TCP bits for non-tcp packets [ 634.262844][T16962] netlink: 'syz.2.3561': attribute type 10 has an invalid length. [ 634.309211][T16964] netlink: 'syz.2.3561': attribute type 10 has an invalid length. [ 634.391977][T16962] bond0: (slave netdevsim2): Releasing backup interface [ 634.452357][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.697488][T16962] team0: Port device netdevsim2 added [ 634.707075][T16964] team0: Port device netdevsim2 removed [ 634.714040][T16964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.722850][T16964] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 634.932472][T16980] loop8: detected capacity change from 0 to 128 [ 635.260139][T16996] loop9: detected capacity change from 0 to 2048 [ 635.524732][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3574'. [ 635.530492][ T28] audit: type=1400 audit(2000000383.010:3156): avc: denied { read } for pid=17007 comm="syz.3.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 635.565009][T16996] loop9: p1 p2 [ 635.568626][T16996] loop9: p1 size 5119 extends beyond EOD, truncated [ 635.571830][ T28] audit: type=1400 audit(2000000383.070:3157): avc: denied { getopt } for pid=17007 comm="syz.3.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 635.576192][T16996] loop9: p2 size 2147483648 extends beyond EOD, truncated [ 638.219501][T16998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.280708][T17021] loop7: detected capacity change from 0 to 128 [ 638.375812][T17028] bridge_slave_0: left allmulticast mode [ 638.381479][T17028] bridge_slave_0: left promiscuous mode [ 638.387436][T17028] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.398352][T17028] bridge_slave_1: left allmulticast mode [ 638.405020][T17028] bridge_slave_1: left promiscuous mode [ 638.410790][T17028] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.421471][T17032] netlink: 'syz.9.3581': attribute type 49 has an invalid length. [ 638.497396][T17028] bond0: (slave bond_slave_0): Releasing backup interface [ 638.513305][T17028] bond0: (slave bond_slave_1): Releasing backup interface [ 638.523402][T17042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17042 comm=syz.7.3583 [ 638.536824][T17028] team0: Port device team_slave_0 removed [ 638.555880][T17028] team0: Port device team_slave_1 removed [ 638.563072][T17042] loop7: detected capacity change from 0 to 512 [ 638.578171][T17028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.587516][T17028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.611055][T17028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.616309][T17042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.618685][T17028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.650491][ T28] audit: type=1400 audit(2000000386.160:3158): avc: denied { write } for pid=17027 comm="syz.7.3583" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 638.677457][T17028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.706973][T17048] loop8: detected capacity change from 0 to 512 [ 638.719029][T17048] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 638.757783][T17048] EXT4-fs (loop8): 1 truncate cleaned up [ 638.765497][T17048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.791725][ T28] audit: type=1400 audit(2000000386.300:3159): avc: denied { write } for pid=17030 comm="syz.8.3584" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 638.825139][T17048] ref_ctr_offset mismatch. inode: 0x12 offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 638.882802][T17042] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3583'. [ 638.949701][ T28] audit: type=1400 audit(2000000386.350:3160): avc: denied { write } for pid=17030 comm="syz.8.3584" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 639.142855][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.171963][T17032] ip6gretap0: entered promiscuous mode [ 639.183618][T17032] ip6gretap0: entered allmulticast mode [ 639.187078][T17061] loop7: detected capacity change from 0 to 512 [ 639.211035][T17061] EXT4-fs: inline encryption not supported [ 639.232820][T17061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 639.261707][T17061] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 639.316825][T17061] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 1 [ 639.360070][T17061] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 639.366845][T17072] xt_l2tp: missing protocol rule (udp|l2tpip) [ 639.375994][T17061] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.3589: Failed to acquire dquot type 1 [ 639.387292][T17061] loop7: lost filesystem error report for type 5 error -5 [ 639.387582][T17061] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 639.395001][T17061] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.3589: corrupted inode contents [ 639.395064][T17061] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 639.418414][T17061] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #12: comm syz.7.3589: mark_inode_dirty error [ 639.418446][T17061] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 639.419212][T17061] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.3589: corrupted inode contents [ 639.419266][T17061] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 639.420771][T17061] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.3589: mark_inode_dirty error [ 639.420799][T17061] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 639.428052][T17061] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.3589: corrupted inode contents [ 639.428112][T17061] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 639.429615][T17061] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 639.429641][T17061] loop7: lost filesystem error report for type 5 error -117 [ 639.429840][T17061] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.3589: corrupted inode contents [ 639.429873][T17061] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 639.430119][ C1] EXT4-fs (loop7): error count since last fsck: 9 [ 639.430142][ C1] EXT4-fs (loop7): initial error at time 2000000386: ext4_acquire_dquot:7041 [ 639.430170][ C1] EXT4-fs (loop7): last error at time 2000000386: ext4_do_update_inode:5742: inode 12 [ 639.433972][T17061] EXT4-fs error (device loop7): ext4_truncate:4691: inode #12: comm syz.7.3589: mark_inode_dirty error [ 639.434028][T17061] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 639.434296][T17061] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 639.434317][T17061] loop7: lost filesystem error report for type 5 error -117 [ 639.434816][T17061] EXT4-fs (loop7): 1 truncate cleaned up [ 639.435309][T17061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.438120][T17077] loop2: detected capacity change from 0 to 512 [ 639.514799][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.632482][ T28] audit: type=1400 audit(2000000387.130:3161): avc: denied { write } for pid=17079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.693407][T17077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.734166][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.792785][ T28] audit: type=1400 audit(2000000387.170:3162): avc: denied { write } for pid=17091 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.807328][T17077] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.848918][T17099] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3598'. [ 639.874710][T17099] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3598'. [ 639.939418][T17077] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, [ 639.939437][ T28] audit: type=1400 audit(2000000387.450:3163): avc: denied { write } for pid=17076 comm="syz.2.3595" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 639.939445][T17077] block bitmap and bg descriptor inconsistent: 105 vs 96 free clusters [ 639.994411][T17077] syzkaller0: entered promiscuous mode [ 640.001356][T17077] syzkaller0: entered allmulticast mode [ 640.028833][T17116] xt_ecn: cannot match TCP bits for non-tcp packets [ 640.095431][T17128] loop9: detected capacity change from 0 to 512 [ 640.106348][T17128] EXT4-fs: Ignoring removed nobh option [ 640.170986][T17128] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.195145][T17128] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.205669][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.218390][T17135] loop8: detected capacity change from 0 to 512 [ 640.257111][T17128] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.3606: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 640.276406][T17134] loop3: detected capacity change from 0 to 4096 [ 640.286764][T17135] EXT4-fs: Ignoring removed i_version option [ 640.318652][T17134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.394652][T17135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.407406][T17135] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.440702][T15022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.464878][T17130] xt_hashlimit: size too large, truncated to 1048576 [ 640.480112][T16720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.534469][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 640.534486][ T28] audit: type=1400 audit(2000000388.000:3166): avc: denied { write } for pid=17129 comm="syz.8.3605" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 640.576523][T17135] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 640.590797][T17148] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3611'. [ 640.621991][T17150] loop3: detected capacity change from 0 to 1024 [ 640.630985][T17152] netlink: 'syz.9.3610': attribute type 29 has an invalid length. [ 640.645722][T17150] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 640.682807][T17148] netlink: 'syz.7.3611': attribute type 16 has an invalid length. [ 640.707097][T17148] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3611'. [ 640.781072][T17150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.802870][ T28] audit: type=1400 audit(2000000388.280:3167): avc: denied { write } for pid=17149 comm="syz.3.3612" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 640.847566][T17174] loop9: detected capacity change from 0 to 4096 [ 640.860520][T17174] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.886079][ T28] audit: type=1400 audit(2000000388.400:3168): avc: denied { write } for pid=17173 comm="syz.9.3617" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.092579][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.164161][T17182] loop7: detected capacity change from 0 to 256 [ 641.864553][ T28] audit: type=1400 audit(2000000389.371:3169): avc: denied { write } for pid=17173 comm="syz.9.3617" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.905366][T16720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.967410][T17185] loop8: detected capacity change from 0 to 1764 [ 642.009033][T17185] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 642.034964][T11783] bio_check_eod: 6 callbacks suppressed [ 642.034980][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.034980][T11783] loop7: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 642.113263][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.113263][T11783] loop7: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 642.167790][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.167790][T11783] loop7: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 642.225787][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.225787][T11783] loop7: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 642.283791][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.283791][T11783] loop7: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 642.321771][T15022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.347897][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.347897][T11783] loop7: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 642.417622][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.417622][T11783] loop7: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 642.475709][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.475709][T11783] loop7: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 642.523260][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.523260][T11783] loop7: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 642.560565][T17187] loop9: detected capacity change from 0 to 128 [ 642.583537][T17187] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 642.610746][T11783] kworker/u8:21: attempt to access beyond end of device [ 642.610746][T11783] loop7: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 642.635063][T17187] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 642.716409][T17197] loop7: detected capacity change from 0 to 164 [ 642.734263][ T28] audit: type=1400 audit(2000000390.221:3170): avc: denied { map } for pid=17195 comm="syz.7.3621" path="socket:[51384]" dev="sockfs" ino=51384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 642.742885][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3623'. [ 642.851767][T17204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3626'. [ 642.864606][T17208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3627'. [ 642.991673][T17220] netlink: 'syz.3.3631': attribute type 1 has an invalid length. [ 642.993880][T17218] xt_hashlimit: size too large, truncated to 1048576 [ 643.048041][T17212] SELinux: failed to load policy [ 643.102131][T17220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.128442][T17220] bond1: (slave bond2): making interface the new active one [ 643.157134][T17220] bond1: (slave bond2): Enslaving as an active interface with an up link [ 643.294928][T17229] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 643.335723][T17235] loop7: detected capacity change from 0 to 512 [ 643.360747][T17235] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 643.399705][T17235] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 643.435034][T17212] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 643.453266][T17235] System zones: 0-1, 15-15, 18-18, 34-34 [ 643.478679][T17212] EXT4-fs (loop2): 1 truncate cleaned up [ 643.485415][T17235] EXT4-fs (loop7): orphan cleanup on readonly fs [ 643.516010][T17231] netlink: 220 bytes leftover after parsing attributes in process `syz.9.3634'. [ 643.527983][T17235] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 643.538284][T17212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.538445][T17229] bond3 (unregistering): Released all slaves [ 643.572386][T17231] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3634'. [ 643.581758][T17235] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 643.608761][T17235] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 643.633974][ T28] audit: type=1400 audit(2000000391.141:3171): avc: denied { read write } for pid=17209 comm="syz.8.3628" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 643.658576][ T28] audit: type=1400 audit(2000000391.141:3172): avc: denied { open } for pid=17209 comm="syz.8.3628" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 643.683394][T17235] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3635: bg 0: block 40: padding at end of block bitmap is not set [ 643.709672][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.724968][T17235] loop7: lost filesystem error report for type 5 error -117 [ 643.725229][T17235] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 643.741257][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 643.741293][ C0] EXT4-fs (loop7): initial error at time 2000000391: ext4_validate_block_bitmap:441 [ 643.741313][ C0] EXT4-fs (loop7): last error at time 2000000391: ext4_validate_block_bitmap:441 [ 643.798441][T17235] loop7: lost filesystem error report for type 5 error -117 [ 643.798574][T17235] EXT4-fs (loop7): 1 truncate cleaned up [ 643.813849][T17235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 643.855883][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.916778][T17248] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 643.939388][T17249] netlink: 'syz.9.3637': attribute type 10 has an invalid length. [ 643.947939][T17249] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3637'. [ 643.948199][T17248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=17248 comm=syz.7.3640 [ 644.030126][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3643'. [ 644.057933][T17255] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 644.058023][T17264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 644.128521][T17255] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 644.146421][ T28] audit: type=1400 audit(2000000391.651:3173): avc: denied { listen } for pid=17268 comm="syz.9.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 644.188709][ T28] audit: type=1400 audit(2000000391.681:3174): avc: denied { connect } for pid=17268 comm="syz.9.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 644.201823][T17271] netlink: 'syz.7.3648': attribute type 1 has an invalid length. [ 644.219739][T17255] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 11: block 198:freeing already freed block (bit 197); block bitmap corrupt. [ 644.262216][T17255] EXT4-fs (loop8): Remounting filesystem read-only [ 644.270943][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 644.277401][ C0] EXT4-fs (loop8): initial error at time 2000000391: mb_free_blocks:2049: inode 11: block 198 [ 644.287735][ C0] EXT4-fs (loop8): last error at time 2000000391: mb_free_blocks:2049: inode 11: block 198 [ 644.304787][T17271] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3648'. [ 644.314421][T17255] EXT4-fs (loop8): 1 truncate cleaned up [ 644.320581][T17255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.440225][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.500982][T17288] netlink: 'syz.8.3653': attribute type 10 has an invalid length. [ 644.510218][T17290] sctp: [Deprecated]: syz.7.3655 (pid 17290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 644.510218][T17290] Use struct sctp_sack_info instead [ 644.528511][T17288] netdevsim netdevsim8 netdevsim2: left allmulticast mode [ 644.547948][T17288] netdevsim netdevsim8 netdevsim2: left promiscuous mode [ 644.562969][T17288] bridge0: port 3(netdevsim2) entered disabled state [ 644.571981][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.588846][T17288] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 644.688220][T17304] 9pnet_virtio: no channels available for device syz [ 644.714352][T17306] 9pnet_virtio: no channels available for device syz [ 644.751660][T17308] netlink: 'syz.8.3662': attribute type 12 has an invalid length. [ 644.766112][T17308] netlink: 'syz.8.3662': attribute type 29 has an invalid length. [ 644.785852][T17308] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3662'. [ 644.808279][T17308] netlink: 'syz.8.3662': attribute type 1 has an invalid length. [ 644.829337][T17308] netlink: 'syz.8.3662': attribute type 2 has an invalid length. [ 644.919084][T17314] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3664'. [ 645.034205][T17318] syzkaller0: entered promiscuous mode [ 645.057902][T17318] syzkaller0: entered allmulticast mode [ 645.297916][T17342] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3674'. [ 645.630518][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 645.630591][ T28] audit: type=1400 audit(2000000393.131:3180): avc: denied { execute } for pid=17350 comm="syz.8.3680" name="file0" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 645.688742][ T28] audit: type=1400 audit(2000000393.131:3181): avc: denied { execute_no_trans } for pid=17350 comm="syz.8.3680" path="/40/file0" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 645.790963][T17366] syzkaller0: entered promiscuous mode [ 645.797958][T17366] syzkaller0: entered allmulticast mode [ 645.831730][T17369] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3685'. [ 646.394863][T17410] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3703'. [ 646.470464][T17420] tmpfs: Unknown parameter 'usrquota' [ 646.558331][T17428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.569572][T17428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.592738][T17431] syzkaller0: entered promiscuous mode [ 646.598385][T17431] syzkaller0: entered allmulticast mode [ 647.644968][T17459] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 647.647439][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3723'. [ 649.008501][T17520] syzkaller0: entered promiscuous mode [ 649.016272][T17520] syzkaller0: entered allmulticast mode [ 649.187686][ T28] audit: type=1400 audit(2000000396.691:3182): avc: denied { bind } for pid=17522 comm="syz.7.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 649.445563][T17532] syzkaller0: entered promiscuous mode [ 649.452633][T17532] syzkaller0: entered allmulticast mode [ 649.525743][T17536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.535213][T17536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.554239][T17536] __nla_validate_parse: 1 callbacks suppressed [ 649.554261][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.577075][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.592438][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.607844][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.616983][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.626294][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.635488][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.644807][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.653973][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.660965][ T28] audit: type=1400 audit(2000000397.171:3183): avc: denied { setopt } for pid=17541 comm="syz.3.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 649.663230][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3752'. [ 649.741574][T17550] syzkaller0: entered promiscuous mode [ 649.747303][T17550] syzkaller0: entered allmulticast mode [ 649.777898][T17552] syzkaller0: entered promiscuous mode [ 649.790988][T17552] syzkaller0: entered allmulticast mode [ 649.836621][T17556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.847930][T17556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.878461][T17558] veth0: entered promiscuous mode [ 649.883975][T17557] veth0: left promiscuous mode [ 649.895004][ T28] audit: type=1400 audit(2000000397.402:3184): avc: denied { module_load } for pid=17553 comm="syz.2.3759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 650.005870][T17572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.014864][T17572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.378145][ T28] audit: type=1400 audit(2000000397.882:3185): avc: denied { write } for pid=17577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.407053][ T28] audit: type=1400 audit(2000000397.912:3186): avc: denied { write } for pid=17590 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.755398][T17613] syzkaller0: entered promiscuous mode [ 650.760958][T17613] syzkaller0: entered allmulticast mode [ 651.178354][ T3377] hid_parser_main: 4 callbacks suppressed [ 651.178374][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.193895][T17633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.211981][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.221075][T17633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.235201][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.250581][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.263202][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.282254][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.303529][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.315863][T17635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.331926][T17635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.350159][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.357633][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.367317][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 651.385917][ T3377] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.04 Device [syz1] on syz1 [ 651.392730][T17641] syzkaller0: entered promiscuous mode [ 651.410227][T17641] syzkaller0: entered allmulticast mode [ 651.440738][T17642] fido_id[17642]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 651.797735][T17657] syzkaller0: entered promiscuous mode [ 651.803470][T17657] syzkaller0: entered allmulticast mode [ 652.013924][ T28] audit: type=1400 audit(2000000399.522:3187): avc: denied { bind } for pid=17672 comm="syz.9.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 652.244018][ T28] audit: type=1400 audit(2000000399.752:3188): avc: denied { setopt } for pid=17689 comm="syz.2.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 652.317618][T17697] 9p: Bad value for 'rfdno' [ 652.346263][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.360429][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.558212][T17697] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.565479][T17697] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.607150][ T28] audit: type=1400 audit(2000000400.112:3189): avc: denied { create } for pid=17708 comm="syz.7.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 652.935903][ T28] audit: type=1400 audit(2000000400.442:3190): avc: denied { ioctl } for pid=17731 comm="syz.8.3823" path="socket:[52588]" dev="sockfs" ino=52588 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 652.972219][T17732] syzkaller0: entered promiscuous mode [ 652.977729][T17732] syzkaller0: entered allmulticast mode [ 653.076584][ T28] audit: type=1400 audit(2000000400.582:3191): avc: denied { write } for pid=17722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.129684][ T28] audit: type=1400 audit(2000000400.632:3192): avc: denied { write } for pid=17748 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.150713][T17690] Set syz1 is full, maxelem 65536 reached [ 653.502105][T17771] syzkaller0: entered promiscuous mode [ 653.509637][T17771] syzkaller0: entered allmulticast mode [ 653.518451][ T28] audit: type=1400 audit(2000000401.022:3193): avc: denied { read } for pid=17774 comm="syz.9.3836" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 653.542103][ T28] audit: type=1400 audit(2000000401.022:3194): avc: denied { open } for pid=17774 comm="syz.9.3836" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 653.598320][T17782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.614188][T17782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.853815][T17791] syzkaller0: entered promiscuous mode [ 653.864418][T17791] syzkaller0: entered allmulticast mode [ 654.038936][T17808] syzkaller0: entered promiscuous mode [ 654.044808][T17808] syzkaller0: entered allmulticast mode [ 654.314588][ T28] audit: type=1400 audit(2000000401.822:3195): avc: denied { mount } for pid=17836 comm="syz.7.3862" name="/" dev="hugetlbfs" ino=52735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 654.365079][ T28] audit: type=1400 audit(2000000401.872:3196): avc: denied { unmount } for pid=16080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 654.387165][T17841] syzkaller0: entered promiscuous mode [ 654.392757][T17841] syzkaller0: entered allmulticast mode [ 654.417606][T17845] syzkaller0: entered promiscuous mode [ 654.424840][T17845] syzkaller0: entered allmulticast mode [ 654.761131][T17879] syzkaller0: entered promiscuous mode [ 654.766633][T17879] syzkaller0: entered allmulticast mode [ 654.858348][T17882] syzkaller1: entered promiscuous mode [ 654.864107][T17882] syzkaller1: entered allmulticast mode [ 654.985042][T17885] syz_tun: entered allmulticast mode [ 654.990776][T17884] syz_tun: left allmulticast mode [ 655.114745][T17904] syzkaller0: entered promiscuous mode [ 655.120502][T17904] syzkaller0: entered allmulticast mode [ 655.195666][T17909] syzkaller0: entered promiscuous mode [ 655.201314][T17909] syzkaller0: entered allmulticast mode [ 655.246264][T17910] set_capacity_and_notify: 4 callbacks suppressed [ 655.246332][T17910] loop3: detected capacity change from 0 to 2048 [ 655.292074][T17910] loop3: p1 p2 [ 655.298011][T17910] loop3: p1 size 5119 extends beyond EOD, truncated [ 655.307770][T17910] loop3: p2 size 2147483648 extends beyond EOD, truncated [ 655.335430][T17910] __nla_validate_parse: 15 callbacks suppressed [ 655.335448][T17910] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3889'. [ 655.359759][T17910] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3889'. [ 655.455557][T17924] loop2: detected capacity change from 0 to 4096 [ 655.470461][T17924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.515381][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.814356][T17946] loop7: detected capacity change from 0 to 256 [ 655.903488][T17943] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.963198][T17943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.983181][T17943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.031916][T11788] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.051509][T11788] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.081588][T11788] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.143480][T11788] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.169866][T11788] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.195689][T11788] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.230715][T11788] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.268271][T11788] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.479666][T17996] loop8: detected capacity change from 0 to 2048 [ 656.621937][T17999] xt_ecn: cannot match TCP bits for non-tcp packets [ 656.750168][T17999] netlink: 'syz.7.3913': attribute type 10 has an invalid length. [ 656.801582][T18001] netlink: 'syz.7.3913': attribute type 10 has an invalid length. [ 656.862851][T17999] bond0: (slave netdevsim2): Releasing backup interface [ 656.871873][T17999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.880151][T17999] team0: Port device netdevsim2 added [ 656.894821][T18001] team0: Port device netdevsim2 removed [ 656.901648][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.910167][T18001] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 656.929255][T17979] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3911'. [ 656.938307][T17979] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3911'. [ 657.458246][T17996] loop8: p1 p2 [ 657.462981][T17996] loop8: p1 size 5119 extends beyond EOD, truncated [ 657.475502][T17996] loop8: p2 size 2147483648 extends beyond EOD, truncated [ 657.637350][ T9215] udevd[9215]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 657.649144][T10652] udevd[10652]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 658.122596][T18016] netlink: 'syz.8.3921': attribute type 1 has an invalid length. [ 658.197746][T18016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 658.257635][T18022] bond2: (slave dummy0): making interface the new active one [ 658.314552][T18022] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 658.522178][T18032] xt_ecn: cannot match TCP bits for non-tcp packets [ 658.653190][T18036] netlink: 'syz.3.3929': attribute type 10 has an invalid length. [ 658.663652][T18036] bond0: (slave netdevsim2): Releasing backup interface [ 658.671655][T18036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.679797][T18036] team0: Port device netdevsim2 added [ 658.729253][T18032] netlink: 'syz.3.3929': attribute type 10 has an invalid length. [ 658.739131][T18032] team0: Port device netdevsim2 removed [ 658.745301][T18032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.753436][T18032] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 658.854490][T18039] loop8: detected capacity change from 0 to 2048 [ 658.992352][T18039] loop8: p1 p2 [ 658.995950][T18039] loop8: p1 size 5119 extends beyond EOD, truncated [ 659.003652][T18039] loop8: p2 size 2147483648 extends beyond EOD, truncated [ 659.021186][T18039] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3932'. [ 659.047239][T18039] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3932'. [ 659.174035][T18048] loop8: detected capacity change from 0 to 512 [ 659.183451][T18048] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 659.260445][T18048] EXT4-fs (loop8): 1 truncate cleaned up [ 659.272967][T18048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.333087][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 659.333108][ T28] audit: type=1400 audit(2000000406.843:3198): avc: denied { write } for pid=18047 comm="syz.8.3936" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 659.390668][ T28] audit: type=1400 audit(2000000406.903:3199): avc: denied { ioctl } for pid=18047 comm="syz.8.3936" path="/95/bus/bus" dev="loop8" ino=18 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 659.808702][T18084] syzkaller0: entered promiscuous mode [ 659.820847][T18084] syzkaller0: entered allmulticast mode [ 660.100558][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3951'. [ 660.222336][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.507451][T18097] xt_ecn: cannot match TCP bits for non-tcp packets [ 660.591779][T18097] netlink: 'syz.8.3954': attribute type 10 has an invalid length. [ 660.638045][T18108] netlink: 'syz.8.3954': attribute type 10 has an invalid length. [ 660.726146][T18109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3958'. [ 660.735645][T18109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3958'. [ 660.799121][T18097] bond0: (slave netdevsim2): Releasing backup interface [ 660.826235][T18097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.888430][T18097] team0: Port device netdevsim2 added [ 660.931278][T18108] team0: Port device netdevsim2 removed [ 660.937756][T18108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.946406][T18108] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 661.066017][T18117] syzkaller0: entered promiscuous mode [ 661.071910][T18117] syzkaller0: entered allmulticast mode [ 661.406408][T18136] 9p: Bad value for 'rfdno' [ 661.475977][T18126] netlink: 'syz.7.3964': attribute type 10 has an invalid length. [ 661.504919][T18133] netlink: 'syz.7.3964': attribute type 10 has an invalid length. [ 661.657209][T18126] bond0: (slave netdevsim2): Releasing backup interface [ 661.738950][T18126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.780392][T18126] team0: Port device netdevsim2 added [ 661.821148][T18133] team0: Port device netdevsim2 removed [ 661.828346][T18133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.836869][T18133] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 661.884359][T18132] Set syz1 is full, maxelem 65536 reached [ 662.105352][T18156] 9p: Bad value for 'rfdno' [ 662.464306][T18142] Set syz1 is full, maxelem 65536 reached [ 662.484424][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3993'. [ 662.885071][T18214] loop8: detected capacity change from 0 to 512 [ 662.892008][T18214] EXT4-fs: Ignoring removed orlov option [ 662.968577][T18214] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.094071][ T28] audit: type=1400 audit(2000000410.503:3200): avc: denied { write } for pid=18202 comm="syz.8.3996" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 663.981135][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4012'. [ 664.303715][T18271] 9p: Bad value for 'rfdno' [ 664.387327][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4025'. [ 664.546615][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.216776][T18328] loop7: detected capacity change from 0 to 512 [ 665.223986][T18328] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 665.234830][T18328] EXT4-fs (loop7): 1 truncate cleaned up [ 665.241092][T18328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.257077][ T28] audit: type=1400 audit(2000000412.773:3201): avc: denied { write } for pid=18327 comm="syz.7.4047" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.288823][ T28] audit: type=1400 audit(2000000412.773:3202): avc: denied { write } for pid=18327 comm="syz.7.4047" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.306577][T18333] syzkaller0: entered promiscuous mode [ 665.311369][ T28] audit: type=1400 audit(2000000412.773:3203): avc: denied { rename } for pid=18327 comm="syz.7.4047" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.320269][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.349400][T18333] syzkaller0: entered allmulticast mode [ 665.405545][T18344] 9p: Bad value for 'rfdno' [ 665.430535][T18342] loop7: detected capacity change from 0 to 4096 [ 665.458100][T18342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.511138][ T28] audit: type=1400 audit(2000000413.013:3204): avc: denied { write } for pid=18341 comm="syz.7.4054" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.578795][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.682333][T18363] 9p: Bad value for 'rfdno' [ 665.896939][T18372] syzkaller0: entered promiscuous mode [ 665.902519][T18372] syzkaller0: entered allmulticast mode [ 665.910085][T18363] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.917254][T18363] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.025808][T18374] syzkaller0: entered promiscuous mode [ 666.031364][T18374] syzkaller0: entered allmulticast mode [ 666.342951][T18386] loop2: detected capacity change from 0 to 512 [ 666.349962][T18386] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 666.359576][T18386] EXT4-fs (loop2): 1 truncate cleaned up [ 666.365756][T18386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.381810][ T28] audit: type=1400 audit(2000000413.853:3205): avc: denied { write } for pid=18385 comm="syz.2.4070" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.404616][ T28] audit: type=1400 audit(2000000413.853:3206): avc: denied { write } for pid=18385 comm="syz.2.4070" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.405000][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.453449][T18392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18392 comm=syz.2.4071 [ 666.555981][T18401] syzkaller0: entered promiscuous mode [ 666.562200][T18401] syzkaller0: entered allmulticast mode [ 666.611801][T18402] syzkaller0: entered promiscuous mode [ 666.617347][T18402] syzkaller0: entered allmulticast mode [ 666.649692][T18406] 9p: Bad value for 'rfdno' [ 666.738431][T18407] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4074'. [ 667.730348][T18428] netlink: 'syz.2.4079': attribute type 10 has an invalid length. [ 667.805377][T18428] bond0: (slave netdevsim2): Releasing backup interface [ 667.856428][T18428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.879816][T18426] netlink: 'syz.2.4079': attribute type 10 has an invalid length. [ 667.945512][T18428] team0: Port device netdevsim2 added [ 668.092945][T18426] team0: Port device netdevsim2 removed [ 668.114921][T18414] Set syz1 is full, maxelem 65536 reached [ 668.127603][T18426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.179214][T18426] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 668.341069][T18445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18445 comm=syz.8.4087 [ 668.427215][T18449] syzkaller0: entered promiscuous mode [ 668.455938][T18449] syzkaller0: entered allmulticast mode [ 668.508693][T18451] syzkaller0: entered promiscuous mode [ 668.514307][T18451] syzkaller0: entered allmulticast mode [ 668.848137][T18462] xt_ecn: cannot match TCP bits for non-tcp packets [ 668.967845][T18462] netlink: 'syz.8.4093': attribute type 10 has an invalid length. [ 668.988538][T18462] bond0: (slave netdevsim2): Releasing backup interface [ 669.001382][T18462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.009452][T18462] team0: Port device netdevsim2 added [ 669.021812][T18462] netlink: 'syz.8.4093': attribute type 10 has an invalid length. [ 669.031860][T18462] team0: Port device netdevsim2 removed [ 669.038303][T18462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.046973][T18462] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 669.070013][T18474] loop3: detected capacity change from 0 to 128 [ 669.077005][T18474] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 669.089358][T18474] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 669.121705][T18476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18476 comm=syz.9.4099 [ 669.335771][T18483] syzkaller0: entered promiscuous mode [ 669.426909][T18485] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4101'. [ 669.751680][T18483] syzkaller0: entered allmulticast mode [ 670.121759][T18489] syzkaller0: entered promiscuous mode [ 670.134965][T18489] syzkaller0: entered allmulticast mode [ 670.309850][T18498] syzkaller0: entered promiscuous mode [ 670.328022][T18498] syzkaller0: entered allmulticast mode [ 670.552265][T18507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18507 comm=syz.3.4110 [ 671.259321][T18528] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4114'. [ 671.310932][T18527] syzkaller0: entered promiscuous mode [ 671.316497][T18527] syzkaller0: entered allmulticast mode [ 672.149790][T18544] syzkaller0: entered promiscuous mode [ 672.172559][T18544] syzkaller0: entered allmulticast mode [ 672.713213][T18574] netlink: 'syz.2.4127': attribute type 10 has an invalid length. [ 672.816737][T18578] 9p: Bad value for 'rfdno' [ 672.845908][T18565] netlink: 'syz.2.4127': attribute type 10 has an invalid length. [ 673.158630][T18574] bond0: (slave netdevsim2): Releasing backup interface [ 673.171496][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.180909][T18574] team0: Port device netdevsim2 added [ 673.245940][T18598] xt_ecn: cannot match TCP bits for non-tcp packets [ 673.461707][T18598] netlink: 'syz.9.4136': attribute type 10 has an invalid length. [ 673.584328][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.657828][T18599] netlink: 'syz.9.4136': attribute type 10 has an invalid length. [ 673.691861][T18598] team0: Port device netdevsim2 added [ 673.747506][T18565] team0: Port device netdevsim2 removed [ 673.894645][T18565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.931880][T18565] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 674.146533][T18599] team0: Port device netdevsim2 removed [ 674.153196][T18599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.161744][T18599] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 674.210473][T18618] 9p: Bad value for 'rfdno' [ 674.222158][T18616] syzkaller0: entered promiscuous mode [ 674.250505][T18616] syzkaller0: entered allmulticast mode [ 674.459410][T18624] loop3: detected capacity change from 0 to 128 [ 674.466219][T18624] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 674.489436][T18624] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 674.922933][T18635] loop7: detected capacity change from 0 to 512 [ 674.930152][T18635] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 674.947629][T18635] EXT4-fs (loop7): 1 truncate cleaned up [ 674.953764][T18635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.971672][ T28] audit: type=1400 audit(2000000422.485:3207): avc: denied { write } for pid=18634 comm="syz.7.4148" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 675.030944][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.055132][ T28] audit: type=1400 audit(2000000422.485:3208): avc: denied { write } for pid=18634 comm="syz.7.4148" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 675.058478][T18641] loop8: detected capacity change from 0 to 512 [ 675.129345][T18641] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 675.202518][T18641] EXT4-fs (loop8): 1 truncate cleaned up [ 675.214412][T18641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.242780][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.328430][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'. [ 675.457487][T18663] 9p: Bad value for 'rfdno' [ 675.538221][T18664] xt_ecn: cannot match TCP bits for non-tcp packets [ 675.740873][T18664] netlink: 'syz.7.4156': attribute type 10 has an invalid length. [ 675.834922][T18665] netlink: 'syz.7.4156': attribute type 10 has an invalid length. [ 675.870867][T18664] bond0: (slave netdevsim2): Releasing backup interface [ 675.953635][T18664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.020823][T18664] team0: Port device netdevsim2 added [ 676.083962][T18665] team0: Port device netdevsim2 removed [ 676.092693][T18665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.102393][T18665] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 676.124246][T18663] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.131451][T18663] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.560800][T18677] syzkaller0: entered promiscuous mode [ 676.577079][T18677] syzkaller0: entered allmulticast mode [ 677.252631][T18696] loop7: detected capacity change from 0 to 256 [ 677.899817][T18715] 9p: Bad value for 'rfdno' [ 677.941475][T18712] syzkaller0: entered promiscuous mode [ 677.954782][T18712] syzkaller0: entered allmulticast mode [ 678.101558][T18721] loop9: detected capacity change from 0 to 256 [ 678.142343][ T28] audit: type=1400 audit(2000000425.655:3209): avc: denied { create } for pid=18723 comm="syz.7.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 678.522594][T18724] loop7: detected capacity change from 0 to 512 [ 678.622807][T18742] loop9: detected capacity change from 0 to 512 [ 678.662021][T18742] EXT4-fs: Ignoring removed i_version option [ 678.698031][T18742] EXT4-fs warning (device loop9): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop9. [ 678.717236][T18724] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 678.864273][T18724] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 678.913671][T18724] EXT4-fs (loop7): 1 truncate cleaned up [ 678.951461][T18755] syzkaller0: entered promiscuous mode [ 678.957051][T18755] syzkaller0: entered allmulticast mode [ 678.964491][T18724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.025082][T18759] ipt_REJECT: TCP_RESET invalid for non-tcp [ 679.059756][T18761] loop9: detected capacity change from 0 to 256 [ 679.100498][ T28] audit: type=1400 audit(2000000426.595:3210): avc: denied { write } for pid=18723 comm="syz.7.4181" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 679.127759][ T28] audit: type=1400 audit(2000000426.605:3211): avc: denied { link } for pid=18723 comm="syz.7.4181" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 679.137175][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.199965][T18771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.217474][T18771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.499276][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4202'. [ 679.513429][T18789] xt_ecn: cannot match TCP bits for non-tcp packets [ 679.633339][T18789] netlink: 'syz.2.4198': attribute type 10 has an invalid length. [ 679.700418][T18790] netlink: 'syz.2.4198': attribute type 10 has an invalid length. [ 679.709232][T18789] bond0: (slave netdevsim2): Releasing backup interface [ 679.719962][T18789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.730473][T18789] team0: Port device netdevsim2 added [ 679.760762][T18790] team0: Port device netdevsim2 removed [ 679.768585][T18790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.777937][T18790] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 680.468711][T18798] loop9: detected capacity change from 0 to 256 [ 680.500259][T18803] loop7: detected capacity change from 0 to 128 [ 680.507324][T18803] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 680.519422][T18803] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 680.593816][T18807] netlink: 'syz.3.4209': attribute type 1 has an invalid length. [ 680.677752][T18812] FAULT_INJECTION: forcing a failure. [ 680.677752][T18812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.702015][T18812] CPU: 1 UID: 0 PID: 18812 Comm: syz.3.4210 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 680.702055][T18812] Tainted: [W]=WARN [ 680.702063][T18812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 680.702075][T18812] Call Trace: [ 680.702083][T18812] [ 680.702090][T18812] __dump_stack+0x1d/0x30 [ 680.702116][T18812] dump_stack_lvl+0x95/0xd0 [ 680.702196][T18812] dump_stack+0x15/0x1b [ 680.702215][T18812] should_fail_ex+0x25e/0x270 [ 680.702243][T18812] should_fail+0xb/0x20 [ 680.702337][T18812] should_fail_usercopy+0x1a/0x20 [ 680.702369][T18812] _copy_to_user+0x20/0xa0 [ 680.702393][T18812] simple_read_from_buffer+0xb5/0x130 [ 680.702421][T18812] proc_fail_nth_read+0x10e/0x150 [ 680.702447][T18812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.702490][T18812] vfs_read+0x18e/0x7c0 [ 680.702511][T18812] ? __rcu_read_unlock+0x4e/0x70 [ 680.702537][T18812] ? __fget_files+0x184/0x1c0 [ 680.702561][T18812] ? mutex_lock+0x57/0x90 [ 680.702624][T18812] ksys_read+0xdc/0x1a0 [ 680.702643][T18812] __x64_sys_read+0x40/0x50 [ 680.702699][T18812] x64_sys_call+0x2886/0x3020 [ 680.702729][T18812] do_syscall_64+0x136/0x3c0 [ 680.702752][T18812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.702774][T18812] RIP: 0033:0x7f1c71dde6ce [ 680.702790][T18812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 680.702869][T18812] RSP: 002b:00007f1c70876fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.702896][T18812] RAX: ffffffffffffffda RBX: 00007f1c708776c0 RCX: 00007f1c71dde6ce [ 680.702918][T18812] RDX: 000000000000000f RSI: 00007f1c708770a0 RDI: 0000000000000004 [ 680.702932][T18812] RBP: 00007f1c70877090 R08: 0000000000000000 R09: 0000000000000000 [ 680.702946][T18812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.703000][T18812] R13: 00007f1c720a6038 R14: 00007f1c720a5fa0 R15: 00007fff11aa0fc8 [ 680.703024][T18812] [ 681.203447][T18820] syzkaller0: entered promiscuous mode [ 681.209522][T18820] syzkaller0: entered allmulticast mode [ 681.219904][T18822] 9p: Bad value for 'rfdno' [ 681.347792][T18825] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4213'. [ 681.587641][T18831] 9p: Bad value for 'rfdno' [ 684.331136][ T28] audit: type=1400 audit(2000000431.846:3212): avc: denied { listen } for pid=18861 comm="syz.7.4230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 684.439213][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4231'. [ 684.478652][T18878] 9pnet_fd: Insufficient options for proto=fd [ 684.487113][ T28] audit: type=1400 audit(2000000431.976:3213): avc: denied { bind } for pid=18877 comm="syz.8.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 684.558334][T18864] loop2: detected capacity change from 0 to 1024 [ 684.566827][ T28] audit: type=1400 audit(2000000431.976:3214): avc: denied { name_bind } for pid=18877 comm="syz.8.4237" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 684.587615][ T28] audit: type=1400 audit(2000000431.976:3215): avc: denied { node_bind } for pid=18877 comm="syz.8.4237" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 684.604180][T18864] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 684.687190][T18864] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 684.706438][T18864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.777903][T18864] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 684.899000][T18901] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4239'. [ 685.283841][T18911] sg_write: data in/out 622592/136 bytes for SCSI command 0x0-- guessing data in; [ 685.283841][T18911] program syz.8.4246 not setting count and/or reply_len properly [ 685.846030][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.989017][T18931] loop8: detected capacity change from 0 to 128 [ 685.995677][T18931] ext2: Unknown parameter 'smackfsfloor' [ 686.003171][T18931] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4254'. [ 686.449627][T18940] xt_ecn: cannot match TCP bits for non-tcp packets [ 686.578395][T18942] netlink: 'syz.7.4253': attribute type 10 has an invalid length. [ 686.633799][T18940] netlink: 'syz.7.4253': attribute type 10 has an invalid length. [ 686.711645][T18942] bond0: (slave netdevsim2): Releasing backup interface [ 686.722954][T18942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.731444][T18942] team0: Port device netdevsim2 added [ 686.876207][T18940] team0: Port device netdevsim2 removed [ 686.883316][T18940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.892006][T18940] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 687.050445][T18964] loop8: detected capacity change from 0 to 512 [ 687.072829][T18964] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 687.090147][T18964] EXT4-fs (loop8): 1 truncate cleaned up [ 687.107991][T18964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.138402][ T28] audit: type=1400 audit(2000000434.656:3216): avc: denied { write } for pid=18963 comm="syz.8.4261" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.767324][T19019] xt_ecn: cannot match TCP bits for non-tcp packets [ 687.856085][T19019] netlink: 'syz.3.4272': attribute type 10 has an invalid length. [ 687.904883][T19020] netlink: 'syz.3.4272': attribute type 10 has an invalid length. [ 688.665781][T19019] bond0: (slave netdevsim2): Releasing backup interface [ 688.674733][T19019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.684002][T19019] team0: Port device netdevsim2 added [ 688.692806][T19020] team0: Port device netdevsim2 removed [ 688.700272][T19020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.708688][T19020] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 689.190644][T19043] loop9: detected capacity change from 0 to 512 [ 689.227857][T19043] EXT4-fs: test_dummy_encryption option not supported [ 689.544430][T19051] loop9: detected capacity change from 0 to 256 [ 689.583039][T19053] loop3: detected capacity change from 0 to 512 [ 689.599053][T19053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 689.623872][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.632494][T19057] syzkaller0: entered promiscuous mode [ 689.638755][T19057] syzkaller0: entered allmulticast mode [ 689.640371][T19053] EXT4-fs (loop3): 1 truncate cleaned up [ 689.682655][T19053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.745205][ T28] audit: type=1400 audit(2000000437.256:3217): avc: denied { write } for pid=19052 comm="syz.3.4285" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 690.066627][T19083] loop8: detected capacity change from 0 to 128 [ 690.211540][T19088] netlink: 372 bytes leftover after parsing attributes in process `syz.2.4296'. [ 690.222590][T19083] loop8: detected capacity change from 0 to 512 [ 690.298647][T19093] xt_ecn: cannot match TCP bits for non-tcp packets [ 690.373101][ T28] audit: type=1400 audit(2000000437.756:3218): avc: denied { connect } for pid=19087 comm="syz.2.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 690.478873][T19093] netlink: 'syz.9.4295': attribute type 10 has an invalid length. [ 690.519509][T19093] bond0: (slave netdevsim2): Releasing backup interface [ 690.529971][T19093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.540600][T19093] team0: Port device netdevsim2 added [ 690.553330][T19093] netlink: 'syz.9.4295': attribute type 10 has an invalid length. [ 690.566409][T19093] team0: Port device netdevsim2 removed [ 690.575283][T19093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.586877][T19093] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 690.623050][T19083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.747773][T19083] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 690.882360][T19083] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4294: corrupted xattr block 33: invalid ea_ino [ 691.072628][T19083] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 691.162865][T19099] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4294: corrupted xattr block 33: invalid ea_ino [ 691.162927][ T28] audit: type=1400 audit(2000000438.676:3219): avc: denied { write } for pid=19081 comm="syz.8.4294" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 691.199396][T19099] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 691.212059][T19083] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4294: corrupted xattr block 33: invalid ea_ino [ 691.374636][T19083] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 691.413000][T19083] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.4294: corrupted xattr block 33: invalid ea_ino [ 691.452305][T19103] loop2: detected capacity change from 0 to 512 [ 691.459185][T19103] ext3: Unknown parameter 'smackfsroot' [ 691.611448][ T28] audit: type=1400 audit(2000000438.886:3220): avc: denied { unlink } for pid=19081 comm="syz.8.4294" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 691.642303][T19083] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 691.642436][T19083] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 691.698208][ T28] audit: type=1400 audit(2000000439.007:3221): avc: denied { map } for pid=19100 comm="syz.2.4298" path="socket:[57768]" dev="sockfs" ino=57768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 691.811276][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.018064][T15022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.476811][T19130] tmpfs: Bad value for 'mpol' [ 692.495298][ T28] audit: type=1400 audit(2000000439.997:3222): avc: denied { mounton } for pid=19128 comm="syz.3.4310" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 692.534337][T19131] xt_ecn: cannot match TCP bits for non-tcp packets [ 692.797701][T19131] netlink: 'syz.9.4307': attribute type 10 has an invalid length. [ 692.821585][T19131] bond0: (slave netdevsim2): Releasing backup interface [ 692.831708][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.843836][T19131] team0: Port device netdevsim2 added [ 692.873388][T19131] netlink: 'syz.9.4307': attribute type 10 has an invalid length. [ 692.888629][T19131] team0: Port device netdevsim2 removed [ 692.897481][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.949260][T19131] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 693.373477][T19140] loop3: detected capacity change from 0 to 256 [ 693.503080][T19140] FAT-fs (loop3): Directory bread(block 1285) failed [ 693.521496][T19140] FAT-fs (loop3): Directory bread(block 1286) failed [ 694.231176][T19147] xt_ecn: cannot match TCP bits for non-tcp packets [ 694.439201][T19147] netlink: 'syz.8.4312': attribute type 10 has an invalid length. [ 694.485011][T19148] netlink: 'syz.8.4312': attribute type 10 has an invalid length. [ 694.541073][T19147] bond0: (slave netdevsim2): Releasing backup interface [ 694.551854][T19147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.563789][T19147] team0: Port device netdevsim2 added [ 694.572502][T19148] team0: Port device netdevsim2 removed [ 694.580119][T19148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.590554][T19148] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 694.624270][T19140] FAT-fs (loop3): Directory bread(block 1287) failed [ 694.634540][T19140] FAT-fs (loop3): Directory bread(block 1288) failed [ 694.667093][ T28] audit: type=1400 audit(2000000442.187:3223): avc: denied { create } for pid=19149 comm="syz.7.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 694.981763][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4313'. [ 695.393910][T19171] loop2: detected capacity change from 0 to 1024 [ 695.410980][T19171] EXT4-fs: Ignoring removed bh option [ 695.432097][T19171] ext4: Unknown parameter 'uid<000000' [ 695.557466][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4311'. [ 695.622188][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4311'. [ 696.008907][T19182] xt_ecn: cannot match TCP bits for non-tcp packets [ 696.312121][T19182] netlink: 'syz.2.4321': attribute type 10 has an invalid length. [ 696.412084][T19183] netlink: 'syz.2.4321': attribute type 10 has an invalid length. [ 696.447092][T19182] bond0: (slave netdevsim2): Releasing backup interface [ 696.509181][T19182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.562368][T19182] team0: Port device netdevsim2 added [ 696.847102][T19183] team0: Port device netdevsim2 removed [ 696.854909][T19183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.865689][T19183] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 697.070334][T19190] 9p: Bad value for 'rfdno' [ 697.665251][T19197] xt_ecn: cannot match TCP bits for non-tcp packets [ 697.770657][T19202] netlink: 'syz.9.4325': attribute type 10 has an invalid length. [ 697.791389][T19202] bond0: (slave netdevsim2): Releasing backup interface [ 697.800614][T19202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.810404][T19202] team0: Port device netdevsim2 added [ 697.854575][T19197] netlink: 'syz.9.4325': attribute type 10 has an invalid length. [ 697.967739][T19197] team0: Port device netdevsim2 removed [ 698.024757][T19197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.141294][T19197] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 698.431537][T19205] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4328'. [ 698.440644][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4328'. [ 698.671169][T19212] syzkaller1: entered promiscuous mode [ 698.700635][T19212] syzkaller1: entered allmulticast mode [ 699.498061][T19212] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 699.514652][T19226] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4334'. [ 699.904612][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'. [ 699.914500][T19229] netlink: 'syz.3.4337': attribute type 10 has an invalid length. [ 699.922414][T19229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4337'. [ 699.947269][T19229] geneve2: entered promiscuous mode [ 699.952870][T19229] geneve2: entered allmulticast mode [ 699.967676][T11792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.025727][T11792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.038511][T19229] netlink: 'syz.3.4337': attribute type 7 has an invalid length. [ 700.046323][T19229] netlink: 'syz.3.4337': attribute type 8 has an invalid length. [ 700.104956][T11792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.113806][T11792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.287204][T19247] syzkaller0: entered promiscuous mode [ 700.307316][T19247] syzkaller0: entered allmulticast mode [ 700.348638][T19251] 9p: Bad value for 'rfdno' [ 700.355994][T19249] loop7: detected capacity change from 0 to 1024 [ 700.385413][T19249] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 700.427714][T19249] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 700.457748][T19249] JBD2: no valid journal superblock found [ 700.475646][T19249] EXT4-fs (loop7): Could not load journal inode [ 700.898707][T19261] 9p: Bad value for 'rfdno' [ 701.038397][T19263] loop8: detected capacity change from 0 to 512 [ 701.047232][T19263] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 701.208978][T19266] loop2: detected capacity change from 0 to 512 [ 701.316726][T19266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.329766][T19266] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.345655][ T28] audit: type=1400 audit(2000000448.858:3224): avc: denied { write } for pid=19258 comm="syz.2.4346" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 701.380818][T19263] EXT4-fs (loop8): 1 truncate cleaned up [ 701.400755][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 701.490038][T19263] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.569786][ T28] audit: type=1400 audit(2000000448.868:3225): avc: denied { write } for pid=19258 comm="syz.2.4346" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 701.647504][ T28] audit: type=1400 audit(2000000449.168:3226): avc: denied { write } for pid=19262 comm="syz.8.4348" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 701.833685][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.219954][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.245790][T19296] loop8: detected capacity change from 0 to 256 [ 702.280006][T19298] syzkaller0: entered promiscuous mode [ 702.286461][T19298] syzkaller0: entered allmulticast mode [ 702.290577][T19300] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4359'. [ 702.301276][T19300] netlink: 'syz.7.4359': attribute type 2 has an invalid length. [ 702.309219][T19300] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4359'. [ 702.319965][ T28] audit: type=1400 audit(2000000449.838:3227): avc: denied { watch } for pid=19299 comm="syz.7.4359" path="/" dev="ramfs" ino=57046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 702.492985][T19304] loop8: detected capacity change from 0 to 128 [ 702.500888][T19304] msdos: Bad value for 'dmask' [ 702.547941][T19308] 9p: Bad value for 'rfdno' [ 702.627774][T19312] loop3: detected capacity change from 0 to 512 [ 702.636605][T19312] EXT4-fs: Ignoring removed bh option [ 702.647910][T19312] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.4364: corrupted in-inode xattr: e_value size too large [ 702.662635][T19312] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 702.662857][T19312] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4364: couldn't read orphan inode 15 (err -117) [ 702.672037][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 702.672061][ C1] EXT4-fs (loop3): initial error at time 2000000450: ext4_iget_extra_inode:5180: inode 15 [ 702.672093][ C1] EXT4-fs (loop3): last error at time 2000000450: ext4_iget_extra_inode:5180: inode 15 [ 702.712753][T19312] loop3: lost filesystem error report for type 5 error -117 [ 702.713268][T19312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.739488][ T28] audit: type=1400 audit(2000000450.258:3228): avc: denied { write } for pid=19311 comm="syz.3.4364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 702.741129][T19312] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.4364: Unrecognised inode hash code 4 [ 702.778787][T19312] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4364: Corrupt directory, running e2fsck is recommended [ 702.782074][ T28] audit: type=1400 audit(2000000450.258:3229): avc: denied { write } for pid=19311 comm="syz.3.4364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 702.822288][ T28] audit: type=1400 audit(2000000450.258:3230): avc: denied { write } for pid=19311 comm="syz.3.4364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 702.847266][ T28] audit: type=1400 audit(2000000450.258:3231): avc: denied { write } for pid=19311 comm="syz.3.4364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 702.869156][ T28] audit: type=1400 audit(2000000450.358:3232): avc: denied { write } for pid=19311 comm="syz.3.4364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 702.909015][T15022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.930393][T19322] loop8: detected capacity change from 0 to 512 [ 702.940001][T19322] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 703.041364][T19326] loop2: detected capacity change from 0 to 256 [ 703.055547][T19322] EXT4-fs (loop8): 1 truncate cleaned up [ 703.074502][T19322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.092178][ T28] audit: type=1400 audit(2000000450.608:3233): avc: denied { write } for pid=19321 comm="syz.8.4369" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 703.153562][T19331] syzkaller0: entered promiscuous mode [ 703.187411][T19331] syzkaller0: entered allmulticast mode [ 703.293593][T19334] xt_ecn: cannot match TCP bits for non-tcp packets [ 703.455316][T19340] netlink: 'syz.3.4368': attribute type 10 has an invalid length. [ 703.496742][T19340] bond0: (slave netdevsim2): Releasing backup interface [ 703.526711][T19340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 703.549532][T19340] team0: Port device netdevsim2 added [ 703.629867][T19334] netlink: 'syz.3.4368': attribute type 10 has an invalid length. [ 703.759523][T19334] team0: Port device netdevsim2 removed [ 703.765738][T19334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 703.774126][T19334] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 703.799259][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.810346][T19356] loop2: detected capacity change from 0 to 512 [ 703.870125][T19356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.890802][T19356] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.962746][T19368] vxcan2: entered allmulticast mode [ 704.052444][T11699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.062195][T19371] syzkaller1: entered promiscuous mode [ 704.080523][T19371] syzkaller1: entered allmulticast mode [ 704.116682][T19375] loop7: detected capacity change from 0 to 512 [ 704.133606][T19375] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 704.163949][T19375] EXT4-fs (loop7): 1 truncate cleaned up [ 704.183595][T19375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.544736][T19387] syzkaller0: entered promiscuous mode [ 704.562690][T19387] syzkaller0: entered allmulticast mode [ 704.766430][T19402] syzkaller0: entered promiscuous mode [ 704.790814][T19402] syzkaller0: entered allmulticast mode [ 704.834074][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4393'. [ 704.846042][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4393'. [ 704.870409][T19407] geneve2: entered promiscuous mode [ 704.876951][T19407] geneve2: entered allmulticast mode [ 705.145187][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4396'. [ 705.239098][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.249337][T19420] syzkaller0: entered promiscuous mode [ 705.269799][T19420] syzkaller0: entered allmulticast mode [ 705.705822][T19427] loop7: detected capacity change from 0 to 512 [ 705.861307][T19431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4402'. [ 705.959224][T19437] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4406'. [ 705.991789][T19427] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 706.195598][T19449] loop8: detected capacity change from 0 to 512 [ 706.564472][T19455] syzkaller0: entered promiscuous mode [ 706.588365][T19455] syzkaller0: entered allmulticast mode [ 707.941583][T19449] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.4410: iget: bad i_size value: 38620345925642 [ 707.962289][T19427] EXT4-fs (loop7): orphan cleanup on readonly fs [ 707.997846][T19462] loop9: detected capacity change from 0 to 512 [ 708.004408][T19462] EXT4-fs: Ignoring removed orlov option [ 708.038925][T19449] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 708.046194][T19449] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.4410: couldn't read orphan inode 15 (err -117) [ 708.067188][T19449] loop8: lost filesystem error report for type 5 error -117 [ 708.085329][T19427] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.4399: Allocating blocks 41-42 which overlap fs metadata [ 708.107193][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 708.107222][ C1] EXT4-fs (loop8): initial error at time 2000000455: ext4_orphan_get:1399: inode 15 [ 708.107834][ C1] EXT4-fs (loop8): last error at time 2000000455: ext4_orphan_get:1404 [ 708.279473][T19449] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.351936][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 708.351955][ T28] audit: type=1400 audit(2000000455.859:3238): avc: denied { write } for pid=19448 comm="syz.8.4410" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 708.404895][T19462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.531627][ T28] audit: type=1326 audit(2000000455.859:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.8.4410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 708.557186][ T28] audit: type=1326 audit(2000000455.859:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.8.4410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 708.582643][ T28] audit: type=1326 audit(2000000455.859:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.8.4410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 708.608098][ T28] audit: type=1326 audit(2000000455.859:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.8.4410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 708.648454][T19427] loop7: lost filesystem error report for type 5 error -117 [ 708.653237][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 708.667006][ C1] EXT4-fs (loop7): initial error at time 2000000456: ext4_mb_mark_diskspace_used:4222 [ 708.676582][ C1] EXT4-fs (loop7): last error at time 2000000456: ext4_mb_mark_diskspace_used:4222 [ 708.717721][T19427] Quota error (device loop7): write_blk: dquota write failed [ 708.744993][T16720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.748738][T19427] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 708.779084][T19474] syzkaller0: entered promiscuous mode [ 708.785062][T19474] syzkaller0: entered allmulticast mode [ 708.792319][T19427] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.4399: Failed to acquire dquot type 0 [ 708.822399][T19427] loop7: lost filesystem error report for type 5 error -117 [ 708.829236][T19427] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 708.875835][T19427] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.4399: corrupted inode contents [ 708.883166][ T28] audit: type=1326 audit(2000000455.859:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.8.4410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 708.920158][ T28] audit: type=1326 audit(2000000455.859:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.8.4410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd602f1dc02 code=0x7ffc0000 [ 708.946045][ T28] audit: type=1326 audit(2000000455.869:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.8.4410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd602ede6ce code=0x7ffc0000 [ 708.981352][T19427] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 708.993299][T19478] loop3: detected capacity change from 0 to 256 [ 708.996211][T19427] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #12: comm syz.7.4399: mark_inode_dirty error [ 709.069040][T19427] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 709.080656][T19427] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.4399: corrupted inode contents [ 709.121352][T19427] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 709.175453][T19427] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.4399: mark_inode_dirty error [ 709.202730][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4419'. [ 709.212169][T19427] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 709.219638][T19427] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.4399: corrupted inode contents [ 709.245882][T19427] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 709.264446][T19449] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4410: bg 0: block 5: invalid block bitmap [ 709.273974][T19427] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 709.294328][T19427] loop7: lost filesystem error report for type 5 error -117 [ 709.309092][T19427] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.4399: corrupted inode contents [ 709.309316][T19449] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 709.316409][T19427] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 709.329754][T19427] EXT4-fs error (device loop7): ext4_truncate:4691: inode #12: comm syz.7.4399: mark_inode_dirty error [ 709.340841][T19449] EXT4-fs (loop8): This should not happen!! Data will be lost [ 709.340841][T19449] [ 709.354653][T19427] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 709.361694][T19449] EXT4-fs (loop8): Total free blocks count 0 [ 709.361715][T19449] EXT4-fs (loop8): Free/Dirty block details [ 709.361730][T19449] EXT4-fs (loop8): free_blocks=0 [ 709.361748][T19449] EXT4-fs (loop8): dirty_blocks=10976 [ 709.361869][T19449] EXT4-fs (loop8): Block reservation details [ 709.361884][T19449] EXT4-fs (loop8): i_reserved_data_blocks=10976 [ 709.377729][T19427] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 709.430438][T19427] loop7: lost filesystem error report for type 5 error -117 [ 709.445905][T19427] EXT4-fs (loop7): 1 truncate cleaned up [ 709.453659][ T39] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 709.458888][T19427] EXT4-fs (loop7): pa ffff8881076abd20: logic 1, phys. 41, len 23 [ 709.479329][T19427] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 709.486539][T16538] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 709.489848][T19427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 709.621997][T16080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.641752][T19496] FAULT_INJECTION: forcing a failure. [ 709.641752][T19496] name failslab, interval 1, probability 0, space 0, times 0 [ 709.667488][T19496] CPU: 1 UID: 0 PID: 19496 Comm: syz.7.4426 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 709.667595][T19496] Tainted: [W]=WARN [ 709.667604][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 709.667618][T19496] Call Trace: [ 709.667627][T19496] [ 709.667637][T19496] __dump_stack+0x1d/0x30 [ 709.667666][T19496] dump_stack_lvl+0x95/0xd0 [ 709.667723][T19496] dump_stack+0x15/0x1b [ 709.667747][T19496] should_fail_ex+0x25e/0x270 [ 709.667777][T19496] should_failslab+0x8c/0xb0 [ 709.667813][T19496] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 709.667841][T19496] ? dst_alloc+0xbd/0x100 [ 709.667875][T19496] ? dst_alloc+0xbd/0x100 [ 709.667910][T19496] dst_alloc+0xbd/0x100 [ 709.667939][T19496] ? ip_route_input_rcu+0x612/0x1b80 [ 709.667961][T19496] ip_route_output_key_hash_rcu+0xed9/0x1320 [ 709.667988][T19496] ip_route_output_flow+0x65/0x110 [ 709.668055][T19496] udp_sendmsg+0x12ce/0x14e0 [ 709.668090][T19496] ? avc_has_perm+0x101/0x190 [ 709.668124][T19496] ? __pfx_udp_sendmsg+0x10/0x10 [ 709.668306][T19496] inet_sendmsg+0xac/0xd0 [ 709.668333][T19496] ? __pfx_inet_sendmsg+0x10/0x10 [ 709.668361][T19496] ____sys_sendmsg+0x4e8/0x580 [ 709.668399][T19496] ___sys_sendmsg+0x195/0x1e0 [ 709.668555][T19496] ? terminate_walk+0x1d5/0x200 [ 709.668607][T19496] __sys_sendmmsg+0x185/0x320 [ 709.668655][T19496] __x64_sys_sendmmsg+0x57/0x70 [ 709.668769][T19496] x64_sys_call+0x27aa/0x3020 [ 709.668815][T19496] do_syscall_64+0x136/0x3c0 [ 709.668842][T19496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.668869][T19496] RIP: 0033:0x7fe3f040de99 [ 709.668891][T19496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.668915][T19496] RSP: 002b:00007fe3eee67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 709.668947][T19496] RAX: ffffffffffffffda RBX: 00007fe3f0695fa0 RCX: 00007fe3f040de99 [ 709.668964][T19496] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000003 [ 709.669042][T19496] RBP: 00007fe3eee67090 R08: 0000000000000000 R09: 0000000000000000 [ 709.669055][T19496] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000001 [ 709.669069][T19496] R13: 00007fe3f0696038 R14: 00007fe3f0695fa0 R15: 00007ffc5c72a498 [ 709.669090][T19496] [ 710.011257][T19511] loop9: detected capacity change from 0 to 512 [ 710.018614][T19511] EXT4-fs: Ignoring removed nobh option [ 710.060514][T19511] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 710.079456][T19511] EXT4-fs (loop9): 1 truncate cleaned up [ 710.088589][T19511] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.141943][T16720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.242591][T19524] netlink: 'syz.7.4430': attribute type 10 has an invalid length. [ 710.373038][T19527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4435'. [ 711.376849][T19536] xt_ecn: cannot match TCP bits for non-tcp packets [ 711.398777][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4438'. [ 711.948354][T19536] netlink: 'syz.8.4437': attribute type 10 has an invalid length. [ 712.033149][T19538] netlink: 'syz.8.4437': attribute type 10 has an invalid length. [ 712.076598][T19536] bond0: (slave netdevsim2): Releasing backup interface [ 712.117080][T19543] vhci_hcd vhci_hcd.3: default hub control req: 0317 v0004 i0004 l0 [ 712.155421][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.271548][T19536] team0: Port device netdevsim2 added [ 712.299150][T19538] team0: Port device netdevsim2 removed [ 712.305859][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.314702][T19538] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 712.598246][T19562] usb usb8: usbfs: process 19562 (syz.3.4446) did not claim interface 0 before use [ 712.639130][T19574] FAULT_INJECTION: forcing a failure. [ 712.639130][T19574] name failslab, interval 1, probability 0, space 0, times 0 [ 712.652095][T19574] CPU: 1 UID: 0 PID: 19574 Comm: syz.2.4450 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 712.652163][T19574] Tainted: [W]=WARN [ 712.652172][T19574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 712.652188][T19574] Call Trace: [ 712.652196][T19574] [ 712.652204][T19574] __dump_stack+0x1d/0x30 [ 712.652227][T19574] dump_stack_lvl+0x95/0xd0 [ 712.652252][T19574] dump_stack+0x15/0x1b [ 712.652275][T19574] should_fail_ex+0x25e/0x270 [ 712.652329][T19574] should_failslab+0x8c/0xb0 [ 712.652362][T19574] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 712.652388][T19574] ? skb_clone+0x151/0x1f0 [ 712.652465][T19574] ? skb_clone+0x151/0x1f0 [ 712.652502][T19574] skb_clone+0x151/0x1f0 [ 712.652536][T19574] __netlink_deliver_tap+0x2be/0x510 [ 712.652563][T19574] netlink_unicast+0x654/0x680 [ 712.652624][T19574] netlink_sendmsg+0x5be/0x6f0 [ 712.652655][T19574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.652690][T19574] ____sys_sendmsg+0x532/0x580 [ 712.652761][T19574] ___sys_sendmsg+0x195/0x1e0 [ 712.652810][T19574] __x64_sys_sendmsg+0xd4/0x160 [ 712.652842][T19574] x64_sys_call+0x194c/0x3020 [ 712.652867][T19574] do_syscall_64+0x136/0x3c0 [ 712.652889][T19574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.652940][T19574] RIP: 0033:0x7f4b427dde99 [ 712.652961][T19574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.653026][T19574] RSP: 002b:00007f4b41237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.653052][T19574] RAX: ffffffffffffffda RBX: 00007f4b42a65fa0 RCX: 00007f4b427dde99 [ 712.653136][T19574] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 712.653149][T19574] RBP: 00007f4b41237090 R08: 0000000000000000 R09: 0000000000000000 [ 712.653162][T19574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.653176][T19574] R13: 00007f4b42a66038 R14: 00007f4b42a65fa0 R15: 00007ffe175a9418 [ 712.653209][T19574] [ 712.932539][T19577] loop3: detected capacity change from 0 to 512 [ 712.957443][T19577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 712.972970][T19577] EXT4-fs (loop3): orphan cleanup on readonly fs [ 712.981210][T19577] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 713.006600][T19577] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 713.013397][T19577] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.4452: bad orphan inode 768 [ 713.023656][T19577] loop3: lost filesystem error report for type 5 error -117 [ 713.024322][T19577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 713.047130][T19577] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 713.064610][T19577] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 713.086874][T19577] syzkaller0: entered promiscuous mode [ 713.092474][T19577] syzkaller0: entered allmulticast mode [ 713.099135][T19577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4452'. [ 713.108248][T19577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4452'. [ 713.226374][T15022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.276626][T19594] loop9: detected capacity change from 0 to 512 [ 713.386871][T19594] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 713.422790][T19594] EXT4-fs (loop9): 1 truncate cleaned up [ 713.430140][T19594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.456803][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 713.456820][ T28] audit: type=1400 audit(2000000460.979:3415): avc: denied { write } for pid=19593 comm="syz.9.4459" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 713.458590][T19597] xt_ecn: cannot match TCP bits for non-tcp packets [ 713.507641][T19602] syzkaller0: entered promiscuous mode [ 713.590585][T19597] netlink: 'syz.3.4458': attribute type 10 has an invalid length. [ 713.629287][T19602] syzkaller0: entered allmulticast mode [ 713.635071][T19598] netlink: 'syz.3.4458': attribute type 10 has an invalid length. [ 713.806035][T19597] bond0: (slave netdevsim2): Releasing backup interface [ 713.907817][T19597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 713.914520][T19616] loop7: detected capacity change from 0 to 764 [ 713.952584][T19597] team0: Port device netdevsim2 added [ 713.969838][T19598] team0: Port device netdevsim2 removed [ 713.976055][T19598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 713.984318][T19598] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 714.299048][ T28] audit: type=1400 audit(2000000461.809:3416): avc: denied { write } for pid=19620 comm="syz.2.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 714.340206][ T28] audit: type=1400 audit(2000000461.859:3417): avc: denied { mount } for pid=19625 comm="syz.8.4468" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 714.363394][T19626] FAULT_INJECTION: forcing a failure. [ 714.363394][T19626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.376433][T19626] CPU: 1 UID: 0 PID: 19626 Comm: syz.8.4468 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 714.376470][T19626] Tainted: [W]=WARN [ 714.376477][T19626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 714.376490][T19626] Call Trace: [ 714.376497][T19626] [ 714.376505][T19626] __dump_stack+0x1d/0x30 [ 714.376606][T19626] dump_stack_lvl+0x95/0xd0 [ 714.376627][T19626] dump_stack+0x15/0x1b [ 714.376653][T19626] should_fail_ex+0x25e/0x270 [ 714.376720][T19626] should_fail+0xb/0x20 [ 714.376766][T19626] should_fail_usercopy+0x1a/0x20 [ 714.376796][T19626] _copy_to_user+0x20/0xa0 [ 714.376820][T19626] simple_read_from_buffer+0xb5/0x130 [ 714.376915][T19626] proc_fail_nth_read+0x10e/0x150 [ 714.376943][T19626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 714.376993][T19626] vfs_read+0x18e/0x7c0 [ 714.377010][T19626] ? __rcu_read_unlock+0x4e/0x70 [ 714.377035][T19626] ? __fget_files+0x184/0x1c0 [ 714.377074][T19626] ? mutex_lock+0x57/0x90 [ 714.377164][T19626] ksys_read+0xdc/0x1a0 [ 714.377188][T19626] __x64_sys_read+0x40/0x50 [ 714.377212][T19626] x64_sys_call+0x2886/0x3020 [ 714.377379][T19626] do_syscall_64+0x136/0x3c0 [ 714.377399][T19626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.377422][T19626] RIP: 0033:0x7fd602ede6ce [ 714.377441][T19626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 714.377466][T19626] RSP: 002b:00007fd601976fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 714.377488][T19626] RAX: ffffffffffffffda RBX: 00007fd6019776c0 RCX: 00007fd602ede6ce [ 714.377502][T19626] RDX: 000000000000000f RSI: 00007fd6019770a0 RDI: 0000000000000007 [ 714.377518][T19626] RBP: 00007fd601977090 R08: 0000000000000000 R09: 0000000000000000 [ 714.377535][T19626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.377552][T19626] R13: 00007fd6031a6038 R14: 00007fd6031a5fa0 R15: 00007fff37ad1728 [ 714.377606][T19626] [ 714.601568][T19630] 9p: Bad value for 'rfdno' [ 714.608033][T19632] loop8: detected capacity change from 0 to 512 [ 714.621890][T16720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.624500][T19632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.643991][T19632] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.670442][ T28] audit: type=1326 audit(2000000462.189:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19631 comm="syz.8.4471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 714.704559][ T28] audit: type=1326 audit(2000000462.189:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19631 comm="syz.8.4471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 714.730839][ T28] audit: type=1326 audit(2000000462.189:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19631 comm="syz.8.4471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 714.756679][ T28] audit: type=1326 audit(2000000462.189:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19631 comm="syz.8.4471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 714.782531][ T28] audit: type=1326 audit(2000000462.189:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19631 comm="syz.8.4471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 714.809735][ T28] audit: type=1326 audit(2000000462.189:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19631 comm="syz.8.4471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 714.835414][ T28] audit: type=1326 audit(2000000462.189:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19631 comm="syz.8.4471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd602f1de99 code=0x7ffc0000 [ 715.869965][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.950128][T19647] xt_ecn: cannot match TCP bits for non-tcp packets [ 716.106761][T19649] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4476'. [ 716.119004][T19649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19649 comm=syz.2.4476 [ 716.688806][T19647] netlink: 'syz.9.4474': attribute type 10 has an invalid length. [ 716.812354][T19650] netlink: 'syz.9.4474': attribute type 10 has an invalid length. [ 717.882691][T19647] bond0: (slave netdevsim2): Releasing backup interface [ 717.890864][T19647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.899297][T19647] team0: Port device netdevsim2 added [ 717.907573][T19650] team0: Port device netdevsim2 removed [ 717.914117][T19650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.922867][T19650] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 718.012258][T19661] syzkaller0: entered promiscuous mode [ 718.030147][T19661] syzkaller0: entered allmulticast mode [ 718.141843][T19679] netlink: 'syz.8.4483': attribute type 10 has an invalid length. [ 718.185920][T19683] loop7: detected capacity change from 0 to 256 [ 718.219958][T19684] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4482'. [ 718.229025][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4482'. [ 718.331677][T19692] loop8: detected capacity change from 0 to 512 [ 718.340038][T19692] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 718.360062][T19692] EXT4-fs (loop8): 1 truncate cleaned up [ 718.369272][T19692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.466361][T19700] tipc: Started in network mode [ 718.471927][T19700] tipc: Node identity 4, cluster identity 4711 [ 718.478470][T19700] tipc: Node number set to 4 [ 718.557657][T19699] ================================================================== [ 718.565757][T19699] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 718.572855][T19699] [ 718.575168][T19699] write to 0xffff8881005e8aac of 4 bytes by task 19692 on cpu 1: [ 718.582868][T19699] xas_set_mark+0x12b/0x140 [ 718.587356][T19699] __folio_start_writeback+0x16a/0x350 [ 718.592812][T19699] ext4_bio_write_folio+0x5a2/0xa10 [ 718.598026][T19699] mpage_process_page_bufs+0x487/0x600 [ 718.603513][T19699] mpage_prepare_extent_to_map+0x79e/0xc00 [ 718.609349][T19699] ext4_do_writepages+0x9e5/0x2720 [ 718.614477][T19699] ext4_writepages+0x18f/0x300 [ 718.619260][T19699] do_writepages+0x1b9/0x300 [ 718.623864][T19699] file_write_and_wait_range+0x178/0x2f0 [ 718.629517][T19699] mmb_fsync_noflush+0x48/0x140 [ 718.634386][T19699] ext4_sync_file+0x1f2/0x6d0 [ 718.639079][T19699] vfs_fsync_range+0xc5/0xe0 [ 718.643689][T19699] ext4_buffered_write_iter+0x426/0x480 [ 718.649254][T19699] ext4_file_write_iter+0x38e/0xef0 [ 718.654467][T19699] iter_file_splice_write+0x6a0/0xa60 [ 718.659857][T19699] direct_splice_actor+0x156/0x280 [ 718.664980][T19699] splice_direct_to_actor+0x2f9/0x680 [ 718.670368][T19699] do_splice_direct+0x119/0x1a0 [ 718.675233][T19699] do_sendfile+0x37d/0x640 [ 718.679668][T19699] __x64_sys_sendfile64+0x105/0x150 [ 718.684878][T19699] x64_sys_call+0x2dc4/0x3020 [ 718.689572][T19699] do_syscall_64+0x136/0x3c0 [ 718.694176][T19699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.700080][T19699] [ 718.702413][T19699] read to 0xffff8881005e8aac of 4 bytes by task 19699 on cpu 0: [ 718.710046][T19699] xas_find_marked+0x602/0x650 [ 718.714819][T19699] filemap_get_folios_tag+0xf7/0x400 [ 718.720129][T19699] mpage_prepare_extent_to_map+0x2f8/0xc00 [ 718.725955][T19699] ext4_do_writepages+0x9e5/0x2720 [ 718.731077][T19699] ext4_writepages+0x18f/0x300 [ 718.735862][T19699] do_writepages+0x1b9/0x300 [ 718.740467][T19699] file_write_and_wait_range+0x178/0x2f0 [ 718.746119][T19699] mmb_fsync_noflush+0x48/0x140 [ 718.750985][T19699] ext4_sync_file+0x1f2/0x6d0 [ 718.755679][T19699] vfs_fsync_range+0xc5/0xe0 [ 718.760285][T19699] ext4_buffered_write_iter+0x426/0x480 [ 718.765851][T19699] ext4_file_write_iter+0x38e/0xef0 [ 718.771065][T19699] iter_file_splice_write+0x6a0/0xa60 [ 718.776448][T19699] direct_splice_actor+0x156/0x280 [ 718.781582][T19699] splice_direct_to_actor+0x2f9/0x680 [ 718.786969][T19699] do_splice_direct+0x119/0x1a0 [ 718.791833][T19699] do_sendfile+0x37d/0x640 [ 718.796262][T19699] __x64_sys_sendfile64+0x105/0x150 [ 718.801473][T19699] x64_sys_call+0x2dc4/0x3020 [ 718.806165][T19699] do_syscall_64+0x136/0x3c0 [ 718.810766][T19699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.816675][T19699] [ 718.819001][T19699] value changed: 0x0a000021 -> 0x04000021 [ 718.824724][T19699] [ 718.827049][T19699] Reported by Kernel Concurrency Sanitizer on: [ 718.833206][T19699] CPU: 0 UID: 0 PID: 19699 Comm: syz.8.4487 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 718.844154][T19699] Tainted: [W]=WARN [ 718.847959][T19699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 718.858020][T19699] ================================================================== [ 718.877421][T19704] netlink: 11870 bytes leftover after parsing attributes in process `syz.7.4490'. [ 718.887080][T19704] netlink: 'syz.7.4490': attribute type 7 has an invalid length. [ 718.895058][T19704] netlink: 11870 bytes leftover after parsing attributes in process `syz.7.4490'. [ 719.181321][T16538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.