last executing test programs: 8m33.126754007s ago: executing program 32 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x0, 0xf, 0x8, 0x81, 0xb7}, {0xa8, 0x2, 0xc3, 0x5, 0x9, 0x3}, 0x8, 0x80000000, 0x1e2c}}, @TCA_TBF_RTAB={0x40f, 0x2, [0x0, 0xa, 0x8, 0x6, 0x8, 0x201, 0x800084d, 0x5, 0x9, 0xe0dc, 0x92, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x94, 0x9, 0x7, 0x10, 0x8, 0x818f, 0x4, 0x8, 0x34, 0x6, 0x3, 0x5, 0xa4, 0xc, 0x8, 0x7fffffff, 0x8, 0x0, 0x3, 0x4, 0x7, 0x6, 0x1000, 0x6, 0x0, 0xf, 0x8001, 0x9, 0xa, 0x4, 0x2, 0x65, 0xbac, 0xc0, 0x80, 0x2cf6, 0x4, 0x49, 0x10, 0x8, 0x4, 0x4, 0x101, 0xffffffb0, 0x8, 0x862e, 0x9, 0x8, 0x1ff, 0x80000001, 0x4, 0x0, 0x190, 0x7fff, 0x6, 0x6000, 0x8000, 0x24, 0x5, 0x5, 0x65, 0xfffffff7, 0x8000, 0x2, 0x1, 0x5, 0x5, 0x8, 0x9, 0xdfc0, 0xd, 0x8, 0x0, 0x8000, 0xd3d, 0x6, 0xfffffffd, 0x400, 0x8, 0xe9f, 0xada3, 0x9, 0x8, 0x8000, 0x1f5a4000, 0x6, 0x401, 0x5, 0x0, 0xffffffff, 0x8000, 0x4, 0x1000, 0xac3, 0x800, 0x0, 0x5, 0xfffffff8, 0x0, 0x5, 0x8, 0x3, 0x9, 0x400, 0xfffffff6, 0x56f, 0x28, 0x4935a2c4, 0xf2db, 0x5, 0xba03, 0xffff, 0xb06, 0x0, 0x4, 0x81, 0x1, 0x2, 0x9, 0xf814, 0x0, 0x3, 0x9, 0x10000, 0x94b4, 0x6, 0x80000001, 0x8000, 0x6, 0x9, 0x4, 0x3, 0xa, 0xf, 0x2, 0xfffffffa, 0xff, 0x90000000, 0x144, 0x4, 0x7, 0x8000, 0x2, 0x0, 0x6, 0x6, 0x0, 0x2, 0x86, 0x10001, 0x4, 0x8, 0x4, 0x2eaf, 0xffff, 0x8, 0x40000006, 0x7, 0x404, 0x5, 0x1000, 0x99, 0x7fff, 0x0, 0x9, 0x1ff, 0x7, 0x2206e57f, 0x3, 0x778, 0x9, 0x3552, 0x4, 0x1, 0xde00, 0x5, 0x80, 0x10, 0x3, 0xeb12, 0x7, 0x4, 0x200, 0xffffffff, 0x56f, 0x8, 0x7, 0x0, 0x3, 0x3, 0x101, 0x80000000, 0x5, 0x30, 0xffff8000, 0x7, 0x1, 0x0, 0x0, 0xffffffff, 0x3, 0x7, 0x1000, 0xfffff060, 0x5, 0x7, 0xb, 0x3, 0x9, 0x1, 0x8001, 0x3, 0x7ffffc01, 0x5b07707f, 0x7, 0x2, 0x3, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, 0x8000, 0x80000000, 0x4, 0x8, 0x8000, 0x52, 0x0, 0x3, 0x6, 0x0, 0x9, 0x5, 0x6, 0x5c, 0x1ff, 0x1, 0x2]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 8m21.764807183s ago: executing program 33 (id=297): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xb146000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) 7m54.847093433s ago: executing program 34 (id=1015): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x40004) 7m21.142756761s ago: executing program 35 (id=1940): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e25, 0x8, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89e1965e0861b2af", 0x8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7m5.416560573s ago: executing program 36 (id=1951): r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$binfmt_misc(r2, &(0x7f0000000480)="dc", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) 6m45.19307814s ago: executing program 37 (id=2749): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='9', 0x1, 0x20004015, &(0x7f0000000280)={0xa, 0x4622, 0x8, @private2={0xfc, 0x2, '\x00', 0x4}, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 5m48.354072629s ago: executing program 38 (id=3589): socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) 5m27.485164688s ago: executing program 39 (id=3925): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10001, 0xfffffffd, 0x3, 0xabca, 0x85, 0x100, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 5m21.234717499s ago: executing program 40 (id=4029): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 5m5.529438651s ago: executing program 41 (id=4256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto(r0, &(0x7f0000000000)='5', 0x1, 0x40, 0x0, 0x0) shutdown(r0, 0x0) recvfrom(r0, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0) 4m56.043280423s ago: executing program 42 (id=4411): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) 4m49.013150723s ago: executing program 43 (id=4515): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 4m25.853593266s ago: executing program 44 (id=4980): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) 4m21.410775177s ago: executing program 45 (id=5050): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x13, &(0x7f0000007000)=""/4096, &(0x7f0000008000)=0x1000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002480)}, 0x4804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r2, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) 3m44.802047259s ago: executing program 46 (id=5767): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) 2m46.640547144s ago: executing program 1 (id=6744): vmsplice(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f00000001c0)="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", 0x2ad}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000005000000000000090100000000000000"], 0x0, 0x4a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x3, 0xc}, {0x5, 0x5, 0xf, 0x1}], 0x10, 0xe}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 2m46.589940727s ago: executing program 1 (id=6745): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xa, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 2m46.52598816s ago: executing program 1 (id=6747): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x1, 0xf) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m45.642266504s ago: executing program 1 (id=6754): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 2m45.440024104s ago: executing program 1 (id=6755): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2m44.842752514s ago: executing program 1 (id=6765): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0xfe3b) 2m44.830068814s ago: executing program 47 (id=6765): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0xfe3b) 2m33.966044965s ago: executing program 7 (id=6910): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 2m33.951968586s ago: executing program 7 (id=6912): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x7fff}, 0x8) 2m33.916182448s ago: executing program 7 (id=6914): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0xfff5}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 2m33.836623192s ago: executing program 7 (id=6915): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=0x3, 0x4) pwrite64(r0, &(0x7f00000000c0)='\x00', 0x1, 0x9000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) r1 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r1, 0x0, 0x63db, 0x7000000) 2m33.744030136s ago: executing program 7 (id=6916): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x10000, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0xe, r2}, 0x10) 2m33.637897362s ago: executing program 7 (id=6917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6200, 0x3ffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) 2m33.620786892s ago: executing program 48 (id=6917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6200, 0x3ffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) 2m15.866792396s ago: executing program 0 (id=7170): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000100)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@shortname_mixed}, {@fat=@debug}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 2m15.661387966s ago: executing program 0 (id=7172): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0xe3, 0x5, 0x8, 0x0, 0x7, 0x4004, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x2}, 0x4000, 0x44, 0xffff7fff, 0x5, 0xdbe0, 0x7f, 0xd34, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x27, 0x727a2a74c58b4717, 0xffff, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)="f56a5f0e025f0bc1f97733066459", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m15.024427328s ago: executing program 0 (id=7176): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m14.464456686s ago: executing program 0 (id=7188): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) unshare(0x24060400) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m14.350553471s ago: executing program 0 (id=7194): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b000000080003"], 0x2c}}, 0x20000000) 2m14.170295451s ago: executing program 0 (id=7199): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) 2m14.129754302s ago: executing program 49 (id=7199): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) 2m13.16654999s ago: executing program 2 (id=7210): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = epoll_create1(0x0) r2 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000300)={0xe000000c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m13.068249026s ago: executing program 2 (id=7211): pipe2(&(0x7f0000000140)={0x0, 0x0}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m12.938839312s ago: executing program 2 (id=7212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x7, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0x8, 0x6, "ad7ef8", 0x8, 0x11, 0x1, @local, @mcast2, {[], {0x4e21, 0x4e23, 0x8}}}}}}}, 0x46) 2m12.055829106s ago: executing program 2 (id=7223): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r0, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x6) 2m11.902153743s ago: executing program 2 (id=7225): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0xe, 0xffff}}}, 0x24}}, 0x48081) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2m11.126785112s ago: executing program 2 (id=7235): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x10, r2}, 0x10) 2m11.099163274s ago: executing program 50 (id=7235): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x10, r2}, 0x10) 54.706292786s ago: executing program 6 (id=8236): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/mnt\x00') 54.2301503s ago: executing program 6 (id=8246): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2, 0x1000000}, 0x10) 54.174855343s ago: executing program 6 (id=8247): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/176, 0xb0}}], 0x1, 0x10040, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 53.981040752s ago: executing program 6 (id=8248): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) getpid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7) 53.915352566s ago: executing program 6 (id=8250): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 53.165306513s ago: executing program 6 (id=8257): r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x100, 0x50, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x3, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x1000}, 0x94) 53.128455115s ago: executing program 51 (id=8257): r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x100, 0x50, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x3, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x1000}, 0x94) 2.728395784s ago: executing program 8 (id=8965): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r3 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 2.366117482s ago: executing program 4 (id=8980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 1.864111817s ago: executing program 8 (id=8969): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf903, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00'}) io_uring_enter(r0, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) 1.7895511s ago: executing program 4 (id=8972): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='Z', 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) 1.370428841s ago: executing program 3 (id=8973): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x0) 1.368631781s ago: executing program 5 (id=8987): io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x200f}) io_uring_enter(0xffffffffffffffff, 0x1e61, 0x9296, 0x1, 0x0, 0x0) pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 1.368359071s ago: executing program 9 (id=8974): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf00bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) 1.368154931s ago: executing program 4 (id=8975): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.318324234s ago: executing program 9 (id=8976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.309364344s ago: executing program 5 (id=8977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) 1.244146308s ago: executing program 5 (id=8982): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x1, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x4, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x45de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0x7, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0x1ff, 0x1a, 0x1600000000, 0xab, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0xdef, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x6, 0xf76d, 0x8, 0xfffffffffffffffb, 0x1, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xb, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x80000001, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x7e, 0x3, 0x0, 0x100, 0xd5, 0x6, 0x4, 0x2, 0x4, 0x5f5]}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x10000) 1.19083358s ago: executing program 9 (id=8983): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @loopback, 0x65}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback={0xfec0ffff00000000}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0xcd, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r2}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x40040}, 0x8016) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@rnullb, r2, &(0x7f00000001c0)='./file0\x00') 1.18910577s ago: executing program 9 (id=8984): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 515.223984ms ago: executing program 4 (id=8985): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) 384.174681ms ago: executing program 5 (id=8986): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 354.293182ms ago: executing program 5 (id=8988): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000f00)={&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/224, 0xe0}], 0x1}, 0x1b96391a320db264) 327.778753ms ago: executing program 5 (id=8989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 309.169044ms ago: executing program 9 (id=8990): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$eJzs3V9Ls3UYB/BLH/doM83+WXrSjzqpk5v0oKNOJBSiQZGuqCC4xVljaxu7d7BJkNBZR72O6LCzIHoDvotOQoKoE49a6ExTDDPSPeDnc7JrfO+LXReDwT32Y4evf/1ZY7fIdvNeTE5MxFSnFOkoRYrJeBAj+/HKlxu/f7X58PR5ShtrWyuvpZTmX/jho8+/ffHH3ux7381/Px0HCx8f/rr608HiwdLhH1uf1otUL1Kr3Ut52m63e/l2s5Z26kUjS+mdZi0vaqneKmrdC/lus93pDFLe2pkrd7q1okh5a5AatUHqtVOvO0j5J3m9lbIsS3Pl4LLhcDj84l9eW/3maDgcHveU4uFJ52NRjtl4POZiPp6IhXgynoqn45l4NhbjuXg+lk6uuuUVAAAAAAAAAAAAAAAAAAAA4J5x/h8AAAAAAAAAAAAAAAAAAADG70bn/0vHHc7/AwAAAAAAAAAAAAAAAAAAwP/N//8DAAAAAAAAAAAAAAAAAADA+G1+8OFba5XK+rspzUT8st+v9qujx1G+8WZl/dV0YuG867d+v/rgLF8Z5eliPh3l03z1ynwmXn5plB9nb7xduZQvx87trw8AAAD3QpbOXHl/n2X/lI+qv30/cOn+fSqWp656xZnbWoX/oBjsNfJms9YtBqW/ir2xFROnU415DIXi+uLn9yNu3jX5aAx/fTHmDybuxPmbPu5JAAAAAAAAAAAAuIm7+DnhuHcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVwUAAP//GASTNA==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x86}, &(0x7f0000000100)=0x90) 297.508685ms ago: executing program 3 (id=8991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 296.722864ms ago: executing program 8 (id=8992): socket(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x7c45, 0x10000, 0x1, 0x85}, &(0x7f0000000340), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x40, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 261.530037ms ago: executing program 3 (id=8993): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 257.708127ms ago: executing program 4 (id=8994): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 251.337977ms ago: executing program 8 (id=8995): openat$ipvs(0xffffffffffffff9c, &(0x7f0000007a80)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 216.093099ms ago: executing program 4 (id=8996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 106.758525ms ago: executing program 3 (id=8997): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[{0x2, 0x3, 0x4, 0xc}], 0x10, 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 106.383574ms ago: executing program 9 (id=8998): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 101.295535ms ago: executing program 8 (id=8999): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 81.694285ms ago: executing program 3 (id=9000): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 14.672189ms ago: executing program 3 (id=9001): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 0s ago: executing program 8 (id=9002): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) kernel console output (not intermixed with test programs): tering): (slave bond_slave_1): Releasing backup interface [ 421.299118][ T4073] bond0 (unregistering): Released all slaves [ 421.335405][T25989] chnl_net:caif_netlink_parms(): no params data found [ 421.351212][T26047] syzkaller1: entered promiscuous mode [ 421.357137][T26047] syzkaller1: entered allmulticast mode [ 421.404754][ T4073] hsr_slave_0: left promiscuous mode [ 421.410771][ T4073] hsr_slave_1: left promiscuous mode [ 421.420065][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.435811][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.451333][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.466247][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.491084][ T4073] veth1_macvtap: left promiscuous mode [ 421.502421][ T4073] veth0_macvtap: left promiscuous mode [ 421.515858][ T4073] veth1_vlan: left promiscuous mode [ 421.523615][ T4073] veth0_vlan: left promiscuous mode [ 421.640262][ T4073] team0 (unregistering): Port device team_slave_1 removed [ 421.663243][ T4073] team0 (unregistering): Port device team_slave_0 removed [ 421.735227][T25989] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.742621][T25989] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.753683][T25989] bridge_slave_0: entered allmulticast mode [ 421.760747][T25989] bridge_slave_0: entered promiscuous mode [ 421.767763][T25989] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.775203][T25989] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.782621][T25989] bridge_slave_1: entered allmulticast mode [ 421.790324][T25989] bridge_slave_1: entered promiscuous mode [ 421.837074][T25989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.849966][T25989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.873640][T26077] loop8: detected capacity change from 0 to 128 [ 421.893061][T25989] team0: Port device team_slave_0 added [ 421.900130][T25989] team0: Port device team_slave_1 added [ 421.916759][T25989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.923851][T25989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.964230][T26077] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.978073][T26077] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 422.035561][T25989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.071052][T25989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.083614][T25989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.126045][T24290] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.135140][T25989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.177987][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 422.178003][ T28] audit: type=1400 audit(2000000464.131:2833): avc: denied { mounton } for pid=26098 comm="syz.8.7227" path="/file0" dev="autofs" ino=100114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 422.227498][T25989] hsr_slave_0: entered promiscuous mode [ 422.246645][T25989] hsr_slave_1: entered promiscuous mode [ 422.412669][T26110] loop8: detected capacity change from 0 to 256 [ 422.650004][T25989] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.676845][T25989] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.698810][T25989] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.713223][T25989] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 422.747646][ T7346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.810954][ T7346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.884815][ T7346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.919712][T25989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.957283][T25989] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.977018][T25989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.987867][T25989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.012421][ T7346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.027848][ T4073] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.034971][ T4073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.054604][ T4073] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.061808][ T4073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.113753][T26165] netlink: 136 bytes leftover after parsing attributes in process `syz.5.7246'. [ 423.138508][T26165] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 423.280475][ T7346] bond0: left allmulticast mode [ 423.285608][ T7346] bridge0: port 1(bond0) entered disabled state [ 423.305956][ T7346] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 423.599024][ T7346] batman_adv: batadv0: Removing interface: ip6gretap1 [ 423.624335][ T7346] bond1 (unregistering): (slave gretap2): Releasing active interface [ 423.685075][ T28] audit: type=1400 audit(2000000465.641:2834): avc: denied { execute_no_trans } for pid=26216 comm="syz.5.7250" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=100506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 423.788756][ T7346] bond0 (unregistering): Released all slaves [ 423.797669][ T7346] bond1 (unregistering): Released all slaves [ 423.808040][T26226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7253'. [ 423.819776][ T7346] bond2 (unregistering): (slave veth5): Releasing active interface [ 423.829285][ T7346] bond2 (unregistering): Released all slaves [ 423.866700][T25989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.007519][ T7346] hsr_slave_0: left promiscuous mode [ 424.033408][ T7346] hsr_slave_1: left promiscuous mode [ 424.071565][ T7346] veth1_macvtap: left promiscuous mode [ 424.086695][ T7346] veth0_macvtap: left promiscuous mode [ 424.106705][ T7346] veth1_vlan: left promiscuous mode [ 424.112031][ T7346] veth0_vlan: left promiscuous mode [ 424.313093][T26268] loop8: detected capacity change from 0 to 512 [ 424.333442][T26268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.346270][T26268] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.363863][T26270] bridge_slave_1: left allmulticast mode [ 424.371460][T26270] bridge_slave_1: left promiscuous mode [ 424.377930][T24290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.387348][T26270] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.410868][T26161] chnl_net:caif_netlink_parms(): no params data found [ 424.515611][T26161] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.531678][T26161] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.544414][T26161] bridge_slave_0: entered allmulticast mode [ 424.552266][T26161] bridge_slave_0: entered promiscuous mode [ 424.560273][T26161] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.567756][T26161] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.575095][T26161] bridge_slave_1: entered allmulticast mode [ 424.582615][T26161] bridge_slave_1: entered promiscuous mode [ 424.612148][T26161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.623615][T26161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.648512][ T28] audit: type=1326 audit(2000000466.611:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.8.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 424.688406][ T28] audit: type=1326 audit(2000000466.611:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.8.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 424.713305][T26161] team0: Port device team_slave_0 added [ 424.719366][T25989] veth0_vlan: entered promiscuous mode [ 424.720148][ T28] audit: type=1326 audit(2000000466.611:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.8.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 424.741263][T25989] veth1_vlan: entered promiscuous mode [ 424.749185][ T28] audit: type=1326 audit(2000000466.611:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.8.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 424.779097][T26161] team0: Port device team_slave_1 added [ 424.784888][ T28] audit: type=1326 audit(2000000466.611:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.8.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 424.810541][ T7346] IPVS: stop unused estimator thread 0... [ 424.811412][ T28] audit: type=1326 audit(2000000466.611:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.8.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 424.840009][ T28] audit: type=1326 audit(2000000466.631:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.8.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 424.854368][T25989] veth0_macvtap: entered promiscuous mode [ 424.885376][ T28] audit: type=1326 audit(2000000466.631:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.8.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 424.889884][T26161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.917472][T26161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.944577][T26161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.966272][T26161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.973433][T26161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.000838][T26161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.020775][T25989] veth1_macvtap: entered promiscuous mode [ 425.041482][T25989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.067334][T26161] hsr_slave_0: entered promiscuous mode [ 425.077420][T26161] hsr_slave_1: entered promiscuous mode [ 425.084762][T26161] debugfs: 'hsr0' already exists in 'hsr' [ 425.102090][T26161] Cannot create hsr debugfs directory [ 425.130940][T25989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.425734][ T7346] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.447387][ T7346] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.482804][ T7346] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.502113][ T7346] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.539921][T26161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.620771][T26161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.774608][T26161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.850019][T26161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.877817][T26382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7278'. [ 425.987816][T26161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.020990][T26161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 426.041939][T26161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 426.073981][T26161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 426.225192][T26161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.272431][T26161] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.296284][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.303455][ T7349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.325200][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.332450][ T4058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.523285][T26161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.894122][T26161] veth0_vlan: entered promiscuous mode [ 426.912155][T26161] veth1_vlan: entered promiscuous mode [ 426.951172][T26161] veth0_macvtap: entered promiscuous mode [ 426.969098][T26161] veth1_macvtap: entered promiscuous mode [ 426.992299][T26161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.081623][T26161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.108978][ T4073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.125537][ T4073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.145207][ T4073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.170660][ T4073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.280871][T26507] loop4: detected capacity change from 0 to 512 [ 427.310667][T26507] EXT4-fs: Ignoring removed nobh option [ 427.356088][T26507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 427.384201][T26507] EXT4-fs (loop4): 1 truncate cleaned up [ 427.398010][T26507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.145817][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 428.145838][ T28] audit: type=1400 audit(2000000470.081:2860): avc: denied { audit_read } for pid=26554 comm="syz.3.7301" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.233353][T26569] loop6: detected capacity change from 0 to 1024 [ 428.254589][T26569] EXT4-fs: Ignoring removed orlov option [ 428.266266][T26161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.342400][T26569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.613900][T26593] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7306'. [ 428.682543][ T28] audit: type=1400 audit(2000000470.641:2861): avc: denied { accept } for pid=26595 comm="syz.5.7307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.125150][T25989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.233697][T26636] loop4: detected capacity change from 0 to 2048 [ 430.320685][T26636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.356488][T26636] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.376455][T26673] openvswitch: netlink: EtherType 0 is less than min 600 [ 430.440555][T26677] loop6: detected capacity change from 0 to 256 [ 430.687936][ T7349] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 345: padding at end of block bitmap is not set [ 430.745953][ T7349] EXT4-fs (loop4): Remounting filesystem read-only [ 430.754549][T26161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.966254][T26710] tipc: Enabling of bearer rejected, failed to enable media [ 431.173370][T26720] loop4: detected capacity change from 0 to 256 [ 431.575866][T26725] xt_hashlimit: size too large, truncated to 1048576 [ 431.909253][T26736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7338'. [ 432.298296][T26747] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7341'. [ 433.207387][T26769] netlink: 'syz.5.7350': attribute type 10 has an invalid length. [ 433.473369][T26792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7360'. [ 434.112884][T26788] loop8: detected capacity change from 0 to 2048 [ 434.289123][T26788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.368604][T26788] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.673729][ T7346] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 345: padding at end of block bitmap is not set [ 434.726028][ T7346] EXT4-fs (loop8): Remounting filesystem read-only [ 434.749408][T24290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.834695][T26817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7370'. [ 434.855863][T26817] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7370'. [ 434.921002][T26818] loop8: detected capacity change from 0 to 512 [ 435.268157][T26818] EXT4-fs (loop8): 1 orphan inode deleted [ 435.323025][T26818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.401513][T24290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.117780][T26856] loop8: detected capacity change from 0 to 256 [ 436.124909][T26856] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 436.206899][T26856] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.264565][T26844] loop6: detected capacity change from 0 to 2048 [ 436.410501][T26866] netlink: 'syz.5.7389': attribute type 4 has an invalid length. [ 436.442247][T26866] netlink: 'syz.5.7389': attribute type 4 has an invalid length. [ 436.457573][T26844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.480556][T26844] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.638266][ T28] audit: type=1326 audit(2000000478.591:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.3.7394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f007e53c799 code=0x0 [ 436.714353][ T4058] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set [ 436.729757][ T4058] EXT4-fs (loop6): Remounting filesystem read-only [ 436.738233][T25989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.247529][T26943] lo speed is unknown, defaulting to 1000 [ 438.293028][T26943] lo speed is unknown, defaulting to 1000 [ 438.311190][T26947] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7422'. [ 438.312048][T26943] lo speed is unknown, defaulting to 1000 [ 438.438273][T26943] infiniband syz2: set active [ 438.443146][ T35] lo speed is unknown, defaulting to 1000 [ 438.455995][T26943] infiniband syz2: added lo [ 438.477689][T26943] RDS/IB: syz2: added [ 438.482700][T26943] smc: adding ib device syz2 with port count 1 [ 438.496865][T26943] smc: ib device syz2 port 1 has no pnetid [ 438.509335][ T35] lo speed is unknown, defaulting to 1000 [ 438.515401][T26943] lo speed is unknown, defaulting to 1000 [ 438.554127][T26943] lo speed is unknown, defaulting to 1000 [ 438.593157][T26943] lo speed is unknown, defaulting to 1000 [ 438.632110][T26943] lo speed is unknown, defaulting to 1000 [ 438.671137][T26943] lo speed is unknown, defaulting to 1000 [ 438.803101][T26943] lo speed is unknown, defaulting to 1000 [ 440.199666][ T28] audit: type=1400 audit(2000000482.161:2863): avc: denied { write } for pid=27026 comm="syz.3.7450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 440.644751][T27053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7459'. [ 441.533394][ T4073] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.778436][ T4073] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.882406][ T4073] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.956011][ T4073] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.087244][ T4073] bridge_slave_1: left allmulticast mode [ 442.115864][ T4073] bridge_slave_1: left promiscuous mode [ 442.128957][ T4073] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.140224][ T4073] bridge_slave_0: left allmulticast mode [ 442.146198][ T4073] bridge_slave_0: left promiscuous mode [ 442.152356][ T4073] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.189394][T27113] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7472'. [ 442.218107][T27115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7473'. [ 442.311979][ T4073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.326510][ T4073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.339210][ T4073] bond0 (unregistering): Released all slaves [ 442.348963][T27123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7473'. [ 442.453786][T27093] lo speed is unknown, defaulting to 1000 [ 442.506641][T27143] netlink: 'syz.8.7481': attribute type 1 has an invalid length. [ 442.563592][T27143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.684550][T27152] bond1: (slave ip6erspan0): making interface the new active one [ 442.694609][T27160] netlink: 'syz.3.7485': attribute type 4 has an invalid length. [ 442.714467][T27152] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 442.770869][T27163] netlink: 'syz.3.7485': attribute type 4 has an invalid length. [ 442.781038][ T4073] hsr_slave_0: left promiscuous mode [ 442.802975][ T4073] hsr_slave_1: left promiscuous mode [ 442.819694][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.836280][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.856198][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.866233][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.886307][ T4073] veth1_macvtap: left promiscuous mode [ 442.895205][ T4073] veth0_macvtap: left promiscuous mode [ 442.906820][ T4073] veth1_vlan: left promiscuous mode [ 442.913500][ T28] audit: type=1400 audit(2000000484.871:2864): avc: denied { watch watch_reads } for pid=27168 comm="syz.5.7488" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 442.937357][ T4073] veth0_vlan: left promiscuous mode [ 442.980530][T27172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=27172 comm=syz.5.7489 [ 443.005433][T27172] netlink: 1195 bytes leftover after parsing attributes in process `syz.5.7489'. [ 443.072234][ T4073] team0 (unregistering): Port device team_slave_1 removed [ 443.103964][T27176] serio: Serial port ttyS3 [ 443.122348][ T4073] team0 (unregistering): Port device team_slave_0 removed [ 443.153927][T27180] loop8: detected capacity change from 0 to 128 [ 443.379508][T27093] chnl_net:caif_netlink_parms(): no params data found [ 443.634638][T27093] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.756404][T27093] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.763667][T27093] bridge_slave_0: entered allmulticast mode [ 443.790543][T27093] bridge_slave_0: entered promiscuous mode [ 443.797559][T27093] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.804670][T27093] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.815845][T27093] bridge_slave_1: entered allmulticast mode [ 443.822307][T27093] bridge_slave_1: entered promiscuous mode [ 443.849517][T27093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.860724][T27093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.891169][T27093] team0: Port device team_slave_0 added [ 443.901217][T27093] team0: Port device team_slave_1 added [ 443.920274][T27093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.939140][T27093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.969541][T27093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.980946][T27093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.993552][T27093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.048790][T27093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.198941][T27093] hsr_slave_0: entered promiscuous mode [ 444.205150][T27093] hsr_slave_1: entered promiscuous mode [ 444.662972][T27093] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 444.673688][T27093] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 444.683286][T27093] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 444.714032][T27093] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 444.812548][T27093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.827773][T27093] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.841343][ T4060] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.848473][ T4060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.863977][ T4060] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.871217][ T4060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.982029][T27093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.131908][T27093] veth0_vlan: entered promiscuous mode [ 445.140222][ T28] audit: type=1400 audit(2000000487.101:2865): avc: denied { unmount } for pid=27326 comm="syz.5.7518" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 445.163390][T27093] veth1_vlan: entered promiscuous mode [ 445.183991][T27093] veth0_macvtap: entered promiscuous mode [ 445.192197][T27093] veth1_macvtap: entered promiscuous mode [ 445.203292][T27093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.214434][T27093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.226560][ T7346] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.240138][ T7346] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.268648][ T7346] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.283441][ T7346] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.284554][ T28] audit: type=1326 audit(2000000487.241:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.4.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e8e6c799 code=0x7ffc0000 [ 445.318741][ T28] audit: type=1326 audit(2000000487.241:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.4.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e8e6c799 code=0x7ffc0000 [ 445.354615][ T28] audit: type=1326 audit(2000000487.241:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.4.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e8e6c799 code=0x7ffc0000 [ 445.379180][ T28] audit: type=1326 audit(2000000487.241:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.4.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e8e6c799 code=0x7ffc0000 [ 445.420045][ T28] audit: type=1326 audit(2000000487.241:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.4.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f58e8e6c799 code=0x7ffc0000 [ 445.465095][ T28] audit: type=1326 audit(2000000487.301:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.4.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e8e6c799 code=0x7ffc0000 [ 445.499256][ T28] audit: type=1326 audit(2000000487.301:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.4.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58e8e6c502 code=0x7ffc0000 [ 445.523515][T27339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7465'. [ 445.540396][ T28] audit: type=1326 audit(2000000487.301:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27331 comm="syz.4.7520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f58e8e6c597 code=0x7ffc0000 [ 445.845121][T27354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7527'. [ 445.969762][T27361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7530'. [ 446.202495][T27381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7539'. [ 447.142736][T27423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7558'. [ 447.826742][T27443] lo speed is unknown, defaulting to 1000 [ 447.942382][T27446] lo speed is unknown, defaulting to 1000 [ 448.001983][T27448] lo speed is unknown, defaulting to 1000 [ 448.085477][T27452] lo speed is unknown, defaulting to 1000 [ 448.400800][T27477] lo speed is unknown, defaulting to 1000 [ 449.165058][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 449.165122][ T28] audit: type=1400 audit(2000000491.121:2944): avc: denied { watch watch_reads } for pid=27494 comm="syz.5.7583" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 449.655986][T27503] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 449.782346][T27526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7598'. [ 449.782346][ T28] audit: type=1400 audit(2000000491.741:2945): avc: denied { execute } for pid=27528 comm="syz.5.7599" path="/file1" dev="ramfs" ino=109582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 449.839890][T27526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7598'. [ 450.062337][ T28] audit: type=1326 audit(2000000492.021:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.5.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 450.098844][T27555] loop8: detected capacity change from 0 to 512 [ 450.136794][ T28] audit: type=1326 audit(2000000492.021:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.5.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 450.190473][T27558] netlink: 'syz.6.7611': attribute type 11 has an invalid length. [ 450.203085][ T28] audit: type=1326 audit(2000000492.021:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.5.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 450.252524][ T28] audit: type=1326 audit(2000000492.051:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.5.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 450.317236][ T28] audit: type=1326 audit(2000000492.051:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.5.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 450.322230][T27564] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7613'. [ 450.386466][ T28] audit: type=1326 audit(2000000492.051:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.5.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 450.400314][T27564] netlink: 'syz.8.7613': attribute type 7 has an invalid length. [ 450.418683][T27564] netlink: 'syz.8.7613': attribute type 8 has an invalid length. [ 450.426707][T27564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7613'. [ 450.460291][ T28] audit: type=1326 audit(2000000492.051:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.5.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 450.556975][ T28] audit: type=1326 audit(2000000492.051:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.5.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 450.653940][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7618'. [ 450.681862][T27577] syz.4.7619: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 450.718798][T27577] CPU: 0 UID: 0 PID: 27577 Comm: syz.4.7619 Tainted: G W syzkaller #0 PREEMPT(full) [ 450.718827][T27577] Tainted: [W]=WARN [ 450.718833][T27577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.718849][T27577] Call Trace: [ 450.718857][T27577] [ 450.718865][T27577] __dump_stack+0x1d/0x30 [ 450.718897][T27577] dump_stack_lvl+0x95/0xd0 [ 450.718978][T27577] dump_stack+0x15/0x1b [ 450.719004][T27577] warn_alloc+0x145/0x1c0 [ 450.719036][T27577] ? __schedule+0x93c/0xd40 [ 450.719071][T27577] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 450.719111][T27577] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 450.719208][T27577] ? irqentry_exit+0x91/0x520 [ 450.719246][T27577] ? preempt_schedule_common+0x11/0x30 [ 450.719343][T27577] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 450.719379][T27577] ? xskq_create+0x36/0xe0 [ 450.719461][T27577] vmalloc_user_noprof+0x7d/0xb0 [ 450.719535][T27577] ? xskq_create+0x80/0xe0 [ 450.719562][T27577] xskq_create+0x80/0xe0 [ 450.719590][T27577] xsk_init_queue+0x70/0xb0 [ 450.719616][T27577] xsk_setsockopt+0x3f5/0x640 [ 450.719642][T27577] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.719723][T27577] __sys_setsockopt+0x184/0x200 [ 450.719753][T27577] __x64_sys_setsockopt+0x64/0x80 [ 450.719842][T27577] x64_sys_call+0x2327/0x3020 [ 450.719925][T27577] do_syscall_64+0x12c/0x370 [ 450.720016][T27577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.720042][T27577] RIP: 0033:0x7f58e8e6c799 [ 450.720061][T27577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.720082][T27577] RSP: 002b:00007f58e78bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.720183][T27577] RAX: ffffffffffffffda RBX: 00007f58e90e5fa0 RCX: 00007f58e8e6c799 [ 450.720200][T27577] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 450.720215][T27577] RBP: 00007f58e8f02c99 R08: 0000000000000004 R09: 0000000000000000 [ 450.720231][T27577] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.720246][T27577] R13: 00007f58e90e6038 R14: 00007f58e90e5fa0 R15: 00007ffc6c792ff8 [ 450.720271][T27577] [ 450.720495][T27577] Mem-Info: [ 450.752948][T27571] loop8: detected capacity change from 0 to 512 [ 450.957578][T27571] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 450.960163][T27577] active_anon:69954 inactive_anon:55 isolated_anon:0 [ 450.960163][T27577] active_file:12191 inactive_file:15904 isolated_file:0 [ 450.960163][T27577] unevictable:0 dirty:219 writeback:0 [ 450.960163][T27577] slab_reclaimable:4514 slab_unreclaimable:26165 [ 450.960163][T27577] mapped:29610 shmem:51234 pagetables:4002 [ 450.960163][T27577] sec_pagetables:0 bounce:0 [ 450.960163][T27577] kernel_misc_reclaimable:0 [ 450.960163][T27577] free:1755804 free_pcp:12888 free_cma:0 [ 450.995307][T27571] EXT4-fs (loop8): 1 truncate cleaned up [ 451.062205][T27577] Node 0 active_anon:279816kB inactive_anon:220kB active_file:48764kB inactive_file:63616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118440kB dirty:876kB writeback:0kB shmem:204936kB kernel_stack:4992kB pagetables:15892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 451.075158][T27571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.100901][T27577] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 451.101201][T27577] lowmem_reserve[]: 0 2879 7857 7857 [ 451.102063][T27577] Node 0 DMA32 free:2944636kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948160kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 451.102601][T27577] lowmem_reserve[]: 0 0 4978 4978 [ 451.103376][T27577] Node 0 Normal free:4063220kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:279816kB inactive_anon:220kB active_file:48764kB inactive_file:63616kB unevictable:0kB writepending:876kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:48144kB local_pcp:15260kB free_cma:0kB [ 451.103664][T27577] lowmem_reserve[]: 0 0 0 0 [ 451.104562][T27577] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 451.108738][T27577] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944636kB [ 451.111027][T27577] Node 0 Normal: 362*4kB (UME) 847*8kB (UME) 275*16kB (UME) 708*32kB (UME) 813*64kB (UME) 520*128kB (UME) 351*256kB (UME) 264*512kB (UME) 230*1024kB (UM) 136*2048kB (UME) 774*4096kB (UM) = 4063248kB [ 451.113502][T27577] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.113553][T27577] 79344 total pagecache pages [ 451.113747][T27577] 37 pages in swap cache [ 451.113836][T27577] Free swap = 124848kB [ 451.113896][T27577] Total swap = 124996kB [ 451.114068][T27577] 2097051 pages RAM [ 451.114107][T27577] 0 pages HighMem/MovableOnly [ 451.114168][T27577] 81611 pages reserved [ 451.501864][T27594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7624'. [ 451.514546][T24290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.759767][T27612] netlink: 'syz.5.7631': attribute type 13 has an invalid length. [ 453.978748][T27659] lo speed is unknown, defaulting to 1000 [ 454.017268][T27661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7651'. [ 456.028336][T27693] loop4: detected capacity change from 0 to 2048 [ 456.310371][T27693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.325389][T27693] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.539016][ T4067] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 456.554024][ T4067] EXT4-fs (loop4): Remounting filesystem read-only [ 456.567064][T26161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.619758][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7664'. [ 457.136663][ T28] kauditd_printk_skb: 185 callbacks suppressed [ 457.136681][ T28] audit: type=1326 audit(2000000499.101:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27735 comm="syz.6.7675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27335c799 code=0x7fc00000 [ 458.033728][T27763] geneve2: entered promiscuous mode [ 458.042906][ T7349] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.053167][ T7349] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.064948][ T7349] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.089336][ T7349] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.198945][T27769] loop6: detected capacity change from 0 to 128 [ 458.263662][T27769] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 458.527787][T27769] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 458.789630][T27093] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.899207][T27778] loop8: detected capacity change from 0 to 1024 [ 458.941727][T27778] EXT4-fs: Ignoring removed orlov option [ 459.010091][T27778] EXT4-fs: Ignoring removed mblk_io_submit option [ 459.044023][T27778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.099800][T27776] loop6: detected capacity change from 0 to 512 [ 459.201915][T27776] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 459.207063][T27783] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7692'. [ 459.281199][T27776] EXT4-fs (loop6): 1 truncate cleaned up [ 459.303521][T27776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.551662][T27093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.844284][T27808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7701'. [ 459.947013][T24290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.063772][ T28] audit: type=1400 audit(2000000502.021:3140): avc: denied { name_bind } for pid=27820 comm="syz.4.7704" path="socket:[110033]" dev="sockfs" ino=110033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 460.110191][T27818] loop8: detected capacity change from 0 to 512 [ 460.161166][T27818] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 460.912537][T27818] loop8: detected capacity change from 0 to 764 [ 460.975948][T27818] iso9660: Unknown parameter 'ÿÿÿ' [ 462.370883][T27857] loop6: detected capacity change from 0 to 1024 [ 462.391810][T27857] EXT4-fs: Ignoring removed orlov option [ 462.400692][T27858] loop4: detected capacity change from 0 to 128 [ 462.453453][T27857] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.569026][T27858] lo speed is unknown, defaulting to 1000 [ 462.655778][T27857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.587585][T27891] lo speed is unknown, defaulting to 1000 [ 463.595346][T27093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.718319][T27933] lo speed is unknown, defaulting to 1000 [ 467.802788][T27993] loop8: detected capacity change from 0 to 8192 [ 468.236495][T28007] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.331667][T28007] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.392439][T28007] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.451273][T28012] loop4: detected capacity change from 0 to 512 [ 468.461485][T28007] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.476544][T28012] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 468.527396][ T7349] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.557013][ T7349] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.592498][ T7349] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.610534][T28012] loop4: detected capacity change from 0 to 764 [ 468.619860][ T4060] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.629828][T28012] iso9660: Unknown parameter 'ÿÿÿ' [ 468.732408][T28026] netlink: 'syz.6.7782': attribute type 29 has an invalid length. [ 468.747350][T28026] netlink: 'syz.6.7782': attribute type 29 has an invalid length. [ 468.818372][T28026] netlink: 'syz.6.7782': attribute type 29 has an invalid length. [ 469.219325][ T4060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.268667][ T4060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.308993][ T4060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.359035][ T4060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.418926][ T4060] bridge_slave_1: left allmulticast mode [ 469.425103][ T4060] bridge_slave_1: left promiscuous mode [ 469.431449][ T4060] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.439461][ T4060] bridge_slave_0: left allmulticast mode [ 469.445217][ T4060] bridge_slave_0: left promiscuous mode [ 469.451073][ T4060] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.618170][ T4060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.628680][ T4060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.649632][ T4060] bond0 (unregistering): Released all slaves [ 469.791348][T28070] netlink: 'syz.5.7798': attribute type 4 has an invalid length. [ 469.821475][T28070] netlink: 'syz.5.7798': attribute type 4 has an invalid length. [ 469.827527][T28074] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7797'. [ 469.906862][T28067] loop6: detected capacity change from 0 to 512 [ 469.917139][ T4060] hsr_slave_0: left promiscuous mode [ 469.939726][T28067] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 469.947558][ T4060] hsr_slave_1: left promiscuous mode [ 469.969853][ T4060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.996037][ T4060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.024483][ T4060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.043287][ T4060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.060663][T28067] loop6: detected capacity change from 0 to 764 [ 470.098081][T28067] iso9660: Unknown parameter 'ÿÿÿ' [ 470.147525][ T4060] veth1_macvtap: left promiscuous mode [ 470.153058][ T4060] veth0_macvtap: left promiscuous mode [ 470.159041][ T4060] veth1_vlan: left promiscuous mode [ 470.168835][ T4060] veth0_vlan: left promiscuous mode [ 470.205289][T28099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7807'. [ 470.285187][ T4060] team0 (unregistering): Port device team_slave_1 removed [ 470.299307][ T4060] team0 (unregistering): Port device team_slave_0 removed [ 470.307433][T28104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7807'. [ 470.343867][ T4067] smc: removing ib device syz2 [ 470.374309][ T3422] lo speed is unknown, defaulting to 1000 [ 470.392499][ T3422] syz2: Port: 1 Link DOWN [ 470.707081][T28076] chnl_net:caif_netlink_parms(): no params data found [ 470.776606][T28076] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.785407][T28076] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.792863][T28076] bridge_slave_0: entered allmulticast mode [ 470.799583][T28076] bridge_slave_0: entered promiscuous mode [ 470.807004][T28076] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.814205][T28076] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.821607][T28076] bridge_slave_1: entered allmulticast mode [ 470.828361][T28076] bridge_slave_1: entered promiscuous mode [ 470.861025][T28076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.888059][T28076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.925097][T28076] team0: Port device team_slave_0 added [ 470.968429][T28076] team0: Port device team_slave_1 added [ 471.003088][T28076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.019618][T28076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.086462][T28076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.107171][T28076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.114218][T28076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.159894][T28076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.278512][T28170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7818'. [ 471.298311][T28076] hsr_slave_0: entered promiscuous mode [ 471.304424][T28076] hsr_slave_1: entered promiscuous mode [ 471.327086][T28076] debugfs: 'hsr0' already exists in 'hsr' [ 471.332885][T28076] Cannot create hsr debugfs directory [ 471.458707][T28181] netlink: 'syz.5.7820': attribute type 29 has an invalid length. [ 471.482689][T28181] netlink: 'syz.5.7820': attribute type 29 has an invalid length. [ 471.532961][T28181] netlink: 'syz.5.7820': attribute type 29 has an invalid length. [ 471.940470][T28076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 471.960018][T28076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 471.974649][T28076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 471.996212][T28076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.139308][T28076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.171872][T28076] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.208930][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.216050][ T7349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.234522][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.241742][ T7349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.586469][T28076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.866407][T28076] veth0_vlan: entered promiscuous mode [ 472.884388][T28076] veth1_vlan: entered promiscuous mode [ 472.914209][T28076] veth0_macvtap: entered promiscuous mode [ 472.935346][T28076] veth1_macvtap: entered promiscuous mode [ 472.965665][T28076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.980037][T28076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.998916][ T4058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.011263][ T4058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.044013][ T4058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.063380][ T4058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.226236][T28327] loop6: detected capacity change from 0 to 1024 [ 473.288135][T28327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 473.317124][T28327] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.477508][T27093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 473.520911][T28333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7847'. [ 473.726784][T28338] loop4: detected capacity change from 0 to 512 [ 473.896810][T28338] EXT4-fs (loop4): 1 orphan inode deleted [ 473.911240][T28338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.996761][T28076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.317082][T28374] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7859'. [ 474.409574][ T28] audit: type=1326 audit(2000000516.371:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.471046][ T28] audit: type=1326 audit(2000000516.391:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.495680][ T28] audit: type=1326 audit(2000000516.401:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.521965][ T28] audit: type=1326 audit(2000000516.401:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.692652][ T28] audit: type=1326 audit(2000000516.401:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.718216][ T28] audit: type=1326 audit(2000000516.401:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.742030][ T28] audit: type=1326 audit(2000000516.401:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.766676][ T28] audit: type=1326 audit(2000000516.401:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.790471][ T28] audit: type=1326 audit(2000000516.401:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 474.814822][ T28] audit: type=1326 audit(2000000516.401:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.8.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 475.012400][T28398] serio: Serial port ttyS3 [ 475.033912][T28396] loop4: detected capacity change from 0 to 512 [ 475.058692][T28396] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 475.076451][T28400] loop6: detected capacity change from 0 to 128 [ 475.207820][T28412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7872'. [ 475.256829][T28414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7873'. [ 475.268901][T28396] loop4: detected capacity change from 0 to 764 [ 475.346240][T28396] iso9660: Unknown parameter 'ÿÿÿ' [ 476.611138][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7896'. [ 477.317219][T28475] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7898'. [ 478.530041][T28505] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7910'. [ 478.590211][T28505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7910'. [ 478.735118][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7910'. [ 479.496217][T28536] loop6: detected capacity change from 0 to 128 [ 479.713931][T28536] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.772603][T28536] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.964096][T27093] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.240869][T28582] loop6: detected capacity change from 0 to 512 [ 481.524234][T28597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7948'. [ 481.550449][T28597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7948'. [ 481.634678][T28597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7948'. [ 482.798552][T28633] netlink: 'syz.4.7958': attribute type 5 has an invalid length. [ 482.819911][T28633] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.7958'. [ 482.874372][T28633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7958'. [ 482.957788][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 482.957805][ T28] audit: type=1326 audit(2000000524.921:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.031571][T28645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7966'. [ 483.035893][ T28] audit: type=1326 audit(2000000524.951:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.126970][ T28] audit: type=1326 audit(2000000524.951:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.176463][ T28] audit: type=1326 audit(2000000524.961:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.208376][ T28] audit: type=1326 audit(2000000524.961:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.232816][ T28] audit: type=1326 audit(2000000524.961:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.260511][ T28] audit: type=1326 audit(2000000524.961:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.284214][ T28] audit: type=1326 audit(2000000524.961:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.336055][ T28] audit: type=1326 audit(2000000524.961:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.383230][ T28] audit: type=1326 audit(2000000524.961:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28640 comm="syz.8.7965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d70e2c799 code=0x7ffc0000 [ 483.412424][T28659] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7972'. [ 483.482750][T28659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7972'. [ 483.681444][T28664] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7973'. [ 483.843123][T28678] netlink: 'syz.4.7981': attribute type 1 has an invalid length. [ 483.853597][T28678] netlink: 'syz.4.7981': attribute type 4 has an invalid length. [ 483.861497][T28678] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7981'. [ 485.514838][T28746] loop6: detected capacity change from 0 to 1024 [ 485.767022][T28746] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 485.781856][T28746] System zones: 0-1, 3-36 [ 485.808033][T28746] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.8010: bad orphan inode 134217728 [ 485.839060][T28746] loop6: lost filesystem error report for type 5 error -117 [ 485.839770][T28746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.976748][T27093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.720050][T14005] Bluetooth: hci0: Frame reassembly failed (-84) [ 487.602472][T28811] __nla_validate_parse: 2 callbacks suppressed [ 487.602489][T28811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8034'. [ 487.627027][T28811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8034'. [ 487.898473][T28833] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8037'. [ 488.103806][T28851] netlink: 'syz.4.8039': attribute type 1 has an invalid length. [ 488.118202][T28851] bond1: entered promiscuous mode [ 488.123692][T28851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.146200][T28851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.156903][T28851] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 488.170935][T28851] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 488.183472][T28851] bond1: (slave vti0): making interface the new active one [ 488.190886][T28851] vti0: entered promiscuous mode [ 488.199837][T28851] bond1: (slave vti0): Enslaving as an active interface with an up link [ 488.730875][T28912] loop6: detected capacity change from 0 to 256 [ 488.768376][ T9496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 489.354739][T28934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.372595][T28934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.414606][T28940] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8054'. [ 489.485398][T28946] netlink: 'syz.3.8059': attribute type 1 has an invalid length. [ 489.509372][T28946] bond2: entered promiscuous mode [ 489.545382][T28946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.571545][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8062'. [ 489.639904][T28955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8062'. [ 489.703961][T28946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.711852][T28946] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 489.722164][T28946] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 489.746558][T28946] bond2: (slave vti0): making interface the new active one [ 489.753835][T28946] vti0: entered promiscuous mode [ 489.771896][T28946] bond2: (slave vti0): Enslaving as an active interface with an up link [ 490.766812][T28977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8071'. [ 490.943720][T28984] loop4: detected capacity change from 0 to 1024 [ 490.993638][T28984] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 491.021697][T28984] System zones: 0-1, 3-36 [ 491.032473][T28984] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.8073: bad orphan inode 134217728 [ 491.048286][T28984] loop4: lost filesystem error report for type 5 error -117 [ 491.050638][T28984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.097635][T28076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.196044][T28998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8078'. [ 491.219164][T29001] netlink: 'syz.5.8077': attribute type 1 has an invalid length. [ 491.249775][T29001] bond4: entered promiscuous mode [ 491.255012][T29001] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.288380][T29001] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.311255][T29001] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 491.329769][T29001] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 491.335384][T29005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8080'. [ 491.344933][T29001] bond4: (slave vti0): making interface the new active one [ 491.354883][T29001] vti0: entered promiscuous mode [ 491.361901][T29001] bond4: (slave vti0): Enslaving as an active interface with an up link [ 491.383071][T29005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8080'. [ 491.427256][T29007] netlink: 'syz.5.8081': attribute type 39 has an invalid length. [ 492.284324][T29045] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.304372][T29045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.336215][T29045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.419621][T29045] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.467471][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 492.467488][ T28] audit: type=1326 audit(2000000534.431:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.496151][T29045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.532658][T29045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.545331][ T28] audit: type=1326 audit(2000000534.431:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.611312][ T28] audit: type=1326 audit(2000000534.431:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.655172][ T28] audit: type=1326 audit(2000000534.431:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.708852][ T28] audit: type=1326 audit(2000000534.461:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.740616][ T28] audit: type=1326 audit(2000000534.461:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.765835][ T28] audit: type=1326 audit(2000000534.461:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.769546][T29045] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.791440][ T28] audit: type=1326 audit(2000000534.481:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.825879][ T28] audit: type=1326 audit(2000000534.481:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.850580][ T28] audit: type=1326 audit(2000000534.481:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 492.875580][T29045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.886854][T29045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.938957][T29045] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.952752][T29045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.962949][T29045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.054397][ T7346] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.062775][ T7346] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.104314][ T7346] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.218905][ T4073] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.227528][ T4073] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.239441][ T4073] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.268240][ T4073] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.285380][ T4073] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.302777][ T4073] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.329532][ T4073] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.355700][ T4073] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.380803][ T4073] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.516359][T29082] xt_l2tp: unknown flags: 10 [ 493.780619][T29095] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.8117'. [ 493.858967][T29102] sctp: [Deprecated]: syz.5.8121 (pid 29102) Use of int in max_burst socket option deprecated. [ 493.858967][T29102] Use struct sctp_assoc_value instead [ 494.131620][T29111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8125'. [ 495.299069][T29171] tipc: Failed to remove unknown binding: 66,1,1/0:4237709351/4237709353 [ 496.082432][T29216] loop4: detected capacity change from 0 to 1024 [ 496.136361][T29221] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8172'. [ 496.160527][T29216] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 496.186040][T29216] EXT4-fs (loop4): mount failed [ 496.226273][T29216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8170'. [ 496.504881][T29232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8175'. [ 497.265659][T29275] netlink: 'syz.8.8191': attribute type 1 has an invalid length. [ 497.296446][T29275] bond2: entered promiscuous mode [ 497.326246][T29275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.362485][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8191'. [ 497.373559][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8191'. [ 497.444590][T29284] bond2: (slave bridge3): making interface the new active one [ 497.452445][T29284] bridge3: entered promiscuous mode [ 497.460053][T29284] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 497.949372][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 497.949462][ T28] audit: type=1326 audit(2000000539.911:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29307 comm="syz.3.8203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x0 [ 498.863262][ T3408] kernel read not supported for file /vga_arbiter (pid: 3408 comm: kworker/0:5) [ 499.422827][T29404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8241'. [ 499.506849][T29408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8244'. [ 499.536620][T29396] loop6: detected capacity change from 0 to 32768 [ 499.612985][T13455] loop6: p1 p3 < > [ 499.631429][T29396] loop6: p1 p3 < > [ 499.829798][T13455] udevd[13455]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 499.836027][T14626] udevd[14626]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 499.886686][T29422] loop6: detected capacity change from 0 to 128 [ 499.922114][T13455] udevd[13455]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 499.930437][T14626] udevd[14626]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 500.390769][ T4054] gretap0 (unregistering): left promiscuous mode [ 500.582122][ T4054] batadv0: left promiscuous mode [ 500.590173][T29439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8256'. [ 500.665577][T29439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.681002][T29439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.038848][ T4054] IPVS: stop unused estimator thread 0... [ 501.120205][ T4054] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.155565][T29444] chnl_net:caif_netlink_parms(): no params data found [ 501.190657][ T4054] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.260219][T29476] netlink: 'syz.5.8264': attribute type 2 has an invalid length. [ 501.271730][ T4054] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.327920][T29478] loop4: detected capacity change from 0 to 512 [ 501.355036][T29478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 501.382337][T29444] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.400674][T29444] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.419196][T29444] bridge_slave_0: entered allmulticast mode [ 501.429544][T29444] bridge_slave_0: entered promiscuous mode [ 501.453826][ T4054] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.473489][T29478] EXT4-fs (loop4): 1 truncate cleaned up [ 501.494855][T29444] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.512176][T29444] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.525795][T29444] bridge_slave_1: entered allmulticast mode [ 501.556396][T29444] bridge_slave_1: entered promiscuous mode [ 501.574138][T29478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.583419][T29444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.632175][T29444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.672578][T29494] loop8: detected capacity change from 0 to 128 [ 501.713782][T29444] team0: Port device team_slave_0 added [ 501.723913][T28076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.777811][T29444] team0: Port device team_slave_1 added [ 501.814761][T29444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.886501][T29444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.993084][T29444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.030362][ T4054] bridge_slave_1: left allmulticast mode [ 502.036357][ T4054] bridge_slave_1: left promiscuous mode [ 502.042124][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.095928][ T4054] bridge_slave_0: left allmulticast mode [ 502.101938][ T4054] bridge_slave_0: left promiscuous mode [ 502.109488][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.287234][ T4054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.297359][ T4054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.316874][ T4054] bond0 (unregistering): Released all slaves [ 502.332894][T29444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.340630][T29444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.390250][T29444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.459631][ T4054] hsr_slave_0: left promiscuous mode [ 502.473808][ T4054] hsr_slave_1: left promiscuous mode [ 502.479960][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.488354][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.499820][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.507317][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.520712][ T4054] veth1_macvtap: left promiscuous mode [ 502.526436][ T4054] veth0_macvtap: left promiscuous mode [ 502.532085][ T4054] veth1_vlan: left promiscuous mode [ 502.537648][ T4054] veth0_vlan: left promiscuous mode [ 502.673850][ T4054] team0 (unregistering): Port device team_slave_1 removed [ 502.684873][ T4054] team0 (unregistering): Port device team_slave_0 removed [ 502.727341][T29444] hsr_slave_0: entered promiscuous mode [ 502.752288][T29444] hsr_slave_1: entered promiscuous mode [ 502.780358][ T28] audit: type=1326 audit(2000000544.741:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 502.836481][ T28] audit: type=1326 audit(2000000544.741:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 502.876900][ T28] audit: type=1326 audit(2000000544.741:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 502.915148][ T28] audit: type=1326 audit(2000000544.741:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 502.979987][ T28] audit: type=1326 audit(2000000544.741:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.014603][ T28] audit: type=1326 audit(2000000544.741:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.044563][ T28] audit: type=1326 audit(2000000544.741:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.069266][ T28] audit: type=1326 audit(2000000544.751:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.094834][ T28] audit: type=1326 audit(2000000544.751:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.120928][ T28] audit: type=1326 audit(2000000544.751:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.147103][ T28] audit: type=1326 audit(2000000544.751:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.170932][ T28] audit: type=1326 audit(2000000544.751:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.213679][ T28] audit: type=1326 audit(2000000544.751:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.292472][ T28] audit: type=1326 audit(2000000544.751:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.5.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 503.560901][T29444] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 503.583048][T29444] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 503.596937][T29444] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 503.608240][T29444] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 503.668640][T29444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.679501][T29444] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.692194][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.699328][ T4064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.722743][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.729895][ T7346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.858214][T29444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.993652][T29444] veth0_vlan: entered promiscuous mode [ 504.005374][T29444] veth1_vlan: entered promiscuous mode [ 504.022486][T29444] veth0_macvtap: entered promiscuous mode [ 504.031340][T29444] veth1_macvtap: entered promiscuous mode [ 504.042968][T29444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.055003][T29444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.069864][ T7346] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.082436][ T7346] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.094911][ T7346] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.109932][ T7346] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.185895][T29676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8306'. [ 505.277706][T29755] geneve2: entered promiscuous mode [ 505.461375][T29770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8317'. [ 505.535384][T29780] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8321'. [ 505.559612][T29780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.595472][T29780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.800881][T29816] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8326'. [ 505.894077][T29829] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8329'. [ 506.010694][T29845] netlink: 'syz.5.8330': attribute type 5 has an invalid length. [ 506.050982][T29845] netlink: 1132 bytes leftover after parsing attributes in process `syz.5.8330'. [ 506.086338][T29845] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8330'. [ 508.423647][T29925] xt_hashlimit: size too large, truncated to 1048576 [ 508.805535][T29946] loop9: detected capacity change from 0 to 128 [ 508.816296][T29946] FAT-fs (loop9): bogus logical sector size 2134 [ 508.834763][T29946] FAT-fs (loop9): Can't find a valid FAT filesystem [ 508.992728][T29954] dvmrp1: entered allmulticast mode [ 509.277646][T29956] loop9: detected capacity change from 0 to 32768 [ 509.335950][T13455] loop9: p1 p3 < > [ 509.346074][T29956] loop9: p1 p3 < > [ 509.517768][T14626] udevd[14626]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 509.528448][T13455] udevd[13455]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 509.571021][T13455] udevd[13455]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 509.581505][T14626] udevd[14626]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 509.671352][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 509.671369][ T28] audit: type=1400 audit(2000000551.621:3412): avc: denied { relabelfrom } for pid=30013 comm="syz.5.8361" name="NETLINK" dev="sockfs" ino=145844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 509.745893][ T28] audit: type=1400 audit(2000000551.621:3413): avc: denied { relabelto } for pid=30013 comm="syz.5.8361" name="NETLINK" dev="sockfs" ino=145844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 509.774868][ T28] audit: type=1326 audit(2000000551.681:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.4.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c55a7c799 code=0x7ffc0000 [ 509.799406][ T28] audit: type=1326 audit(2000000551.681:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.4.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c55a7c799 code=0x7ffc0000 [ 509.831811][ T28] audit: type=1326 audit(2000000551.681:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.4.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c55a7c799 code=0x7ffc0000 [ 509.942707][ T28] audit: type=1326 audit(2000000551.681:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.4.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c55a7c799 code=0x7ffc0000 [ 510.027595][ T28] audit: type=1326 audit(2000000551.681:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.4.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c55a7c799 code=0x7ffc0000 [ 510.088561][ T28] audit: type=1326 audit(2000000551.681:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.4.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f5c55a7c799 code=0x7ffc0000 [ 510.129016][ T28] audit: type=1326 audit(2000000551.681:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.4.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c55a7c799 code=0x7ffc0000 [ 510.211343][T30064] loop9: detected capacity change from 0 to 512 [ 510.223679][T30064] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 510.376786][ T28] audit: type=1326 audit(2000000551.681:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.4.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c55a7c799 code=0x7ffc0000 [ 510.471298][T30064] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.8367: invalid indirect mapped block 1023410176 (level 0) [ 510.471337][T13113] kernel write not supported for file bpf-prog (pid: 13113 comm: kworker/0:16) [ 510.582764][T30064] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 510.583275][T30064] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, [ 510.593117][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 510.593132][ C1] EXT4-fs (loop9): initial error at time 2000000552: ext4_free_branches:1023: inode 11 [ 510.593153][ C1] EXT4-fs (loop9): last error at time 2000000552: ext4_free_branches:1023: inode 11 [ 510.610303][T30056] xt_hashlimit: size too large, truncated to 1048576 [ 510.616859][T30064] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 510.669220][T30064] EXT4-fs (loop9): 1 truncate cleaned up [ 510.680517][T30064] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.760044][T30077] geneve2: entered promiscuous mode [ 510.798864][T29444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.063555][T30083] loop4: detected capacity change from 0 to 256 [ 512.233562][T30138] loop9: detected capacity change from 0 to 256 [ 513.445553][T30177] netlink: 'syz.4.8416': attribute type 10 has an invalid length. [ 513.475738][T30177] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8416'. [ 513.495015][T30177] hsr0: entered promiscuous mode [ 513.513766][T30177] bridge0: port 3(hsr0) entered blocking state [ 513.531891][T30177] bridge0: port 3(hsr0) entered disabled state [ 513.552199][T30177] hsr0: entered allmulticast mode [ 513.567044][T30177] hsr_slave_0: entered allmulticast mode [ 513.583261][T30177] hsr_slave_1: entered allmulticast mode [ 513.812772][T30177] bridge0: port 3(hsr0) entered blocking state [ 513.819557][T30177] bridge0: port 3(hsr0) entered forwarding state [ 514.050149][T30191] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8421'. [ 514.195485][T30194] geneve5: entered promiscuous mode [ 514.207808][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 42084 - 0 [ 514.235866][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 42084 - 0 [ 514.262785][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 42084 - 0 [ 514.296935][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 42084 - 0 [ 514.748365][T30234] loop4: detected capacity change from 0 to 512 [ 514.760952][T30234] EXT4-fs: Ignoring removed nobh option [ 514.791430][T30234] EXT4-fs (loop4): orphan cleanup on readonly fs [ 514.835276][T30234] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.8435: EA inode hash validation failed [ 514.866466][T30234] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 514.885266][T30234] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.8435: corrupted inode contents [ 514.904749][T30234] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 514.905798][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 514.922527][ C1] EXT4-fs (loop4): initial error at time 2000000556: ext4_do_update_inode:5569: inode 15 [ 514.933238][ C1] EXT4-fs (loop4): last error at time 2000000556: ext4_do_update_inode:5569: inode 15 [ 514.953513][T30234] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.8435: mark_inode_dirty error [ 514.965350][T30234] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 514.974956][T30234] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.8435: corrupted inode contents [ 515.005442][T30234] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 515.006895][T30234] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.8435: mark_inode_dirty error [ 515.036936][T30234] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 515.037777][T30234] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.8435: mark inode dirty (error -117) [ 515.071692][T30234] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 515.073634][T30234] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 515.104684][T30234] EXT4-fs (loop4): 1 orphan inode deleted [ 515.116253][T30234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 515.172140][T28076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.766709][T30287] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8455'. [ 515.930517][T30296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8458'. [ 516.220911][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 516.220926][ T28] audit: type=1400 audit(2000000558.181:3506): avc: denied { append } for pid=30312 comm="syz.8.8464" name="rt_cache" dev="proc" ino=4026533292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 516.463165][T30322] netlink: 'syz.9.8467': attribute type 1 has an invalid length. [ 516.478751][T30322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.500508][T30322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8467'. [ 516.545693][T30322] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8467'. [ 516.586942][T30322] macsec1: entered promiscuous mode [ 516.595653][T30322] bond1: entered promiscuous mode [ 516.614232][T30322] macsec1: entered allmulticast mode [ 516.627859][T30322] bond1: entered allmulticast mode [ 518.295178][T30342] syz.5.8475 (30342) used greatest stack depth: 5880 bytes left [ 518.557080][T30389] ref_ctr_offset mismatch. inode: 0x1309 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 518.757961][ T28] audit: type=1326 audit(2000000560.721:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 518.807222][T30409] xt_hashlimit: size too large, truncated to 1048576 [ 518.916071][ T28] audit: type=1326 audit(2000000560.721:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 518.942911][ T28] audit: type=1326 audit(2000000560.721:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 518.967885][ T28] audit: type=1326 audit(2000000560.721:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 519.001170][ T28] audit: type=1326 audit(2000000560.741:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 519.025900][ T28] audit: type=1326 audit(2000000560.741:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 519.050581][ T28] audit: type=1326 audit(2000000560.751:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 519.074575][ T28] audit: type=1326 audit(2000000560.751:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 519.084072][T30421] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8493'. [ 519.159522][T30421] lo: Caught tx_queue_len zero misconfig [ 519.547693][ T28] audit: type=1326 audit(2000000560.751:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30401 comm="syz.5.8489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 520.689589][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8509'. [ 520.856035][T30477] loop4: detected capacity change from 0 to 256 [ 521.341111][T30493] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.8516'. [ 521.430517][T30495] netlink: 'syz.4.8517': attribute type 12 has an invalid length. [ 521.451103][T30495] netlink: 'syz.4.8517': attribute type 29 has an invalid length. [ 521.472298][T30495] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8517'. [ 522.235297][T30508] loop9: detected capacity change from 0 to 256 [ 522.787717][T30536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8533'. [ 523.145407][T30549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.411307][ T4064] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.435663][ T4064] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 523.449599][ T4064] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 523.507418][ T4064] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.539050][ T4064] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 523.560088][ T4064] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 523.581217][ T4064] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.609488][ T4064] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 523.642247][ T4064] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 523.699500][T30565] syzkaller0: entered promiscuous mode [ 523.715167][T30565] syzkaller0: entered allmulticast mode [ 523.743180][ T4064] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.764015][ T4064] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 523.778508][ T4064] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 523.976100][T30588] geneve3: entered promiscuous mode [ 523.987292][ T4064] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.006723][ T4064] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.034913][ T4064] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.058015][ T4064] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.294845][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 524.294863][ T28] audit: type=1326 audit(2000000566.251:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.393524][ T28] audit: type=1326 audit(2000000566.251:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.505715][ T28] audit: type=1326 audit(2000000566.251:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.555702][ T28] audit: type=1326 audit(2000000566.291:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.605698][ T28] audit: type=1326 audit(2000000566.291:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.655663][ T28] audit: type=1326 audit(2000000566.291:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.695745][ T28] audit: type=1326 audit(2000000566.291:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.740085][ T28] audit: type=1326 audit(2000000566.291:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.768525][ T28] audit: type=1326 audit(2000000566.291:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 524.792647][ T28] audit: type=1326 audit(2000000566.291:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.8556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007e53c799 code=0x7ffc0000 [ 525.046106][T30609] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿÿ [ 526.375063][T30669] cgroup: fork rejected by pids controller in /syz9 [ 526.733979][T31016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8599'. [ 527.938222][T31292] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8611'. [ 527.953695][T31292] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8611'. [ 528.112696][T31307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8616'. [ 528.487076][T31329] tipc: Failed to remove unknown binding: 66,1,1/0:142228514/142228516 [ 528.496477][T31329] tipc: Failed to remove unknown binding: 66,1,1/0:142228514/142228516 [ 528.690605][T31338] loop4: detected capacity change from 0 to 1024 [ 528.706106][T31338] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 528.714934][T31338] System zones: 0-1, 3-36 [ 528.745916][T31338] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.8629: bad orphan inode 134217728 [ 528.765102][T31338] loop4: lost filesystem error report for type 5 error -117 [ 528.775597][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 528.789368][ C1] EXT4-fs (loop4): initial error at time 2000000570: ext4_orphan_get:1417 [ 528.797910][ C1] EXT4-fs (loop4): last error at time 2000000570: ext4_orphan_get:1417 [ 528.813337][T31338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.518924][T31389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8646'. [ 529.667764][T28076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.753401][T31414] geneve3: entered promiscuous mode [ 529.761564][T14005] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.805467][T14005] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.824798][T14005] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.834541][T14005] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.889843][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 529.889899][ T28] audit: type=1326 audit(2000000571.831:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 529.930661][T31426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.950833][T31426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.960047][ T28] audit: type=1326 audit(2000000571.831:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 529.989161][ T28] audit: type=1326 audit(2000000571.831:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 530.013478][ T28] audit: type=1326 audit(2000000571.841:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 530.037581][ T28] audit: type=1326 audit(2000000571.841:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 530.041777][T31428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8664'. [ 530.061806][ T28] audit: type=1326 audit(2000000571.841:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 530.061845][ T28] audit: type=1326 audit(2000000571.841:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 530.061878][ T28] audit: type=1326 audit(2000000571.841:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 530.141663][ T28] audit: type=1326 audit(2000000571.841:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 530.165329][ T28] audit: type=1326 audit(2000000571.841:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31421 comm="syz.5.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 530.419164][T31445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8673'. [ 530.430647][T31446] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.8668'. [ 530.537192][T31449] netlink: 11522 bytes leftover after parsing attributes in process `syz.4.8674'. [ 532.223027][T31493] ip6gre1: entered promiscuous mode [ 532.234965][T31493] ip6gre1: entered allmulticast mode [ 533.328095][T31517] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 2, id = 0 [ 533.457899][T31525] loop9: detected capacity change from 0 to 512 [ 533.528649][T31525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 533.574802][T31525] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.8703: iget: bad i_size value: 38620345925642 [ 533.631476][T31525] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 533.631724][T31525] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8703: couldn't read orphan inode 15 (err -117) [ 533.640982][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 533.641014][ C1] EXT4-fs (loop9): initial error at time 2000000831: ext4_orphan_get:1391: inode 15 [ 533.641036][ C1] EXT4-fs (loop9): last error at time 2000000831: ext4_orphan_get:1391: inode 15 [ 533.678597][T31525] loop9: lost filesystem error report for type 5 error -117 [ 533.684908][T31525] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.818957][T31536] loop4: detected capacity change from 0 to 512 [ 533.827321][T31537] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.8703: bg 0: block 5: invalid block bitmap [ 533.840019][T31536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 533.865490][T31537] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1796 with error 28 [ 533.866648][T31536] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.8705: corrupted in-inode xattr: invalid ea_ino [ 533.879651][T31537] EXT4-fs (loop9): This should not happen!! Data will be lost [ 533.879651][T31537] [ 533.901017][T31537] EXT4-fs (loop9): Total free blocks count 0 [ 533.907661][T31537] EXT4-fs (loop9): Free/Dirty block details [ 533.913581][T31537] EXT4-fs (loop9): free_blocks=0 [ 533.918555][T31537] EXT4-fs (loop9): dirty_blocks=1796 [ 533.923870][T31537] EXT4-fs (loop9): Block reservation details [ 533.929902][T31537] EXT4-fs (loop9): i_reserved_data_blocks=1796 [ 533.942213][T31536] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 533.945602][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 533.961202][ C1] EXT4-fs (loop4): initial error at time 2000000831: ext4_iget_extra_inode:5025: inode 15 [ 533.967170][T31536] EXT4-fs (loop4): Remounting filesystem read-only [ 533.971203][ C1] EXT4-fs (loop4): last error at time 2000000831: ext4_iget_extra_inode:5025: inode 15 [ 534.006207][T31536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.062532][T28076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.089137][T29444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.962467][T31560] loop9: detected capacity change from 0 to 1024 [ 535.024532][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 535.024552][ T28] audit: type=1400 audit(2000000832.954:3730): avc: denied { connect } for pid=31561 comm="syz.8.8714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 535.087380][T31560] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 536.599993][T31593] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8728'. [ 536.611432][T31593] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8728'. [ 536.783435][T31597] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8730'. [ 537.066420][T31605] loop4: detected capacity change from 0 to 128 [ 537.259015][ T4064] kworker/u8:12: attempt to access beyond end of device [ 537.259015][ T4064] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 537.273016][ T4064] kworker/u8:12: attempt to access beyond end of device [ 537.273016][ T4064] loop4: rw=1, sector=169, nr_sectors = 6 limit=128 [ 537.636406][T31629] loop9: detected capacity change from 0 to 512 [ 537.668338][T31629] EXT4-fs: Ignoring removed nobh option [ 537.696336][T31629] EXT4-fs (loop9): orphan cleanup on readonly fs [ 537.719793][T31629] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.8743: EA inode hash validation failed [ 537.772241][T31629] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.8743: corrupted inode contents [ 537.807412][T31629] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 537.807619][T31629] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.8743: mark_inode_dirty error [ 537.816912][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 537.816930][ C0] EXT4-fs (loop9): initial error at time 2000000835: ext4_do_update_inode:5569: inode 15 [ 537.816969][ C0] EXT4-fs (loop9): last error at time 2000000835: ext4_do_update_inode:5569: inode 15 [ 537.886427][T31629] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 537.888035][T31629] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.8743: corrupted inode contents [ 537.911703][T31629] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 537.912050][T31629] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.8743: mark_inode_dirty error [ 537.955631][T31629] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 538.049221][T31629] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.8743: mark inode dirty (error -117) [ 538.071035][T31629] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 538.071281][T31629] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 538.204391][T31629] EXT4-fs (loop9): 1 orphan inode deleted [ 538.219340][T31629] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 538.463459][T29444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.796192][T31667] loop9: detected capacity change from 0 to 1024 [ 538.901956][T31667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 538.996219][T31675] netlink: 'syz.3.8762': attribute type 8 has an invalid length. [ 539.024435][T31667] System zones: 0-1, 3-36 [ 539.098361][T31667] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.8757: bad orphan inode 134217728 [ 539.118580][T31667] loop9: lost filesystem error report for type 5 error -117 [ 539.124052][T31667] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.405019][ T28] audit: type=1400 audit(2000000837.354:3731): avc: denied { shutdown } for pid=31686 comm="syz.3.8767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 539.444634][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8768'. [ 539.468906][T31689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8768'. [ 539.546653][T29444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.756028][T31712] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8778'. [ 540.663700][T31732] loop4: detected capacity change from 0 to 2048 [ 540.679424][T31732] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 540.747484][T31732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.142416][T31754] 9p: Bad value for 'rfdno' [ 541.175913][T31756] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8793'. [ 541.513914][T28076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.141509][T31770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8809'. [ 542.167272][T31770] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.403146][T31787] ip6erspan0: left promiscuous mode [ 542.416149][T31787] bridge1: left promiscuous mode [ 542.435616][T31787] bridge1: left allmulticast mode [ 542.440954][T31787] gre2: left promiscuous mode [ 542.460741][T31787] geneve2: left promiscuous mode [ 542.473189][T31787] bond2: left promiscuous mode [ 542.483829][T31787] vti0: left promiscuous mode [ 542.592417][T31799] tipc: Failed to remove unknown binding: 66,0,0/0:2059446782/2059446783 [ 543.296915][ T7346] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 42084 - 0 [ 543.318537][ T7346] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 42084 - 0 [ 543.343965][ T7346] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 42084 - 0 [ 543.366342][ T7346] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 42084 - 0 [ 544.179773][T31838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8835'. [ 544.222400][T31838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8835'. [ 544.254379][T31845] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8835'. [ 544.591976][ T28] audit: type=1400 audit(2000000842.544:3732): avc: denied { name_bind } for pid=31885 comm="syz.8.8844" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 544.626355][T31888] loop4: detected capacity change from 0 to 128 [ 544.638573][T31888] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 544.651018][T31888] FAT-fs (loop4): Filesystem has been set read-only [ 545.704154][ T28] audit: type=1326 audit(2000000843.654:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 545.770527][ T28] audit: type=1326 audit(2000000843.654:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 545.821366][ T28] audit: type=1326 audit(2000000843.654:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 545.867884][ T28] audit: type=1326 audit(2000000843.654:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 545.931319][ T28] audit: type=1326 audit(2000000843.654:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 546.002412][ T28] audit: type=1326 audit(2000000843.684:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 546.050172][ T28] audit: type=1326 audit(2000000843.684:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 546.124293][ T28] audit: type=1326 audit(2000000843.694:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 546.165666][ T28] audit: type=1326 audit(2000000843.694:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520ae2c799 code=0x7ffc0000 [ 547.174004][T31997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8885'. [ 547.756026][T32020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8893'. [ 548.748105][T32044] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.755343][T32044] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.883950][T32044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.025053][T14005] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.060137][T14005] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.085692][T14005] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.121987][T14005] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.141874][T14005] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.150999][T14005] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.160142][T14005] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.173695][T14005] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.355468][T32092] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8913'. [ 549.367625][T32092] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8913'. [ 549.495471][T32103] loop9: detected capacity change from 0 to 512 [ 549.502507][T32103] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.509411][T32103] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 549.616145][T32110] IPVS: Unknown mcast interface: veth1_vlan [ 549.703366][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 549.703384][ T28] audit: type=1400 audit(2000000847.654:3772): avc: denied { bind } for pid=32120 comm="syz.8.8926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 549.730305][T32119] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8925'. [ 549.803511][T32129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8930'. [ 549.883875][T32125] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.891181][T32125] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.993311][T32125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.069501][T32125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.148557][T32125] bond1: left allmulticast mode [ 550.153606][T32125] bond1: left promiscuous mode [ 550.185910][ T4064] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.203845][ T4064] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.241597][ T4064] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.271530][ T4064] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.621211][T32188] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8952'. [ 551.361332][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8967'. [ 551.381600][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8967'. [ 551.394584][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8967'. [ 551.669948][T32233] bridge0: port 3(hsr0) entered disabled state [ 551.676236][T32233] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.683547][T32233] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.800882][T32233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.812181][T32233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.916844][ T4064] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.937338][ T4064] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 551.965787][ T4064] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.974807][ T4064] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 551.997164][ T4064] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.028021][ T4064] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 552.045417][ T4064] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.087990][ T4064] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 552.574640][T32256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8976'. [ 552.596982][T32256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8976'. [ 553.502740][T32271] netlink: 27 bytes leftover after parsing attributes in process `syz.5.8986'. [ 553.656253][T32277] loop9: detected capacity change from 0 to 8192 [ 553.836076][T32299] netlink: 27 bytes leftover after parsing attributes in process `syz.8.8999'. [ 553.847467][T32298] loop9: detected capacity change from 0 to 1024 [ 553.898961][T32298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 553.928457][T32298] System zones: 0-1, 3-36 [ 553.961904][T32298] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.8998: bad orphan inode 134217728 [ 553.976210][T32298] loop9: lost filesystem error report for type 5 error -117 [ 553.990216][T32298] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.261387][T32298] ================================================================== [ 554.269547][T32298] BUG: KCSAN: data-race in filemap_read / filemap_read [ 554.276449][T32298] [ 554.278804][T32298] read to 0xffff8881176fb528 of 8 bytes by task 32311 on cpu 1: [ 554.286484][T32298] filemap_read+0x6f/0xa10 [ 554.290938][T32298] generic_file_read_iter+0x79/0x330 [ 554.296285][T32298] ext4_file_read_iter+0x1cc/0x290 [ 554.301452][T32298] copy_splice_read+0x471/0x6c0 [ 554.306344][T32298] splice_direct_to_actor+0x28f/0x670 [ 554.311762][T32298] do_splice_direct+0x119/0x1a0 [ 554.316656][T32298] do_sendfile+0x382/0x650 [ 554.321119][T32298] __x64_sys_sendfile64+0x105/0x150 [ 554.326350][T32298] x64_sys_call+0x2dc4/0x3020 [ 554.331106][T32298] do_syscall_64+0x12c/0x370 [ 554.335731][T32298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.341651][T32298] [ 554.344003][T32298] write to 0xffff8881176fb528 of 8 bytes by task 32298 on cpu 0: [ 554.351748][T32298] filemap_read+0x98d/0xa10 [ 554.356288][T32298] generic_file_read_iter+0x79/0x330 [ 554.361605][T32298] ext4_file_read_iter+0x1cc/0x290 [ 554.366743][T32298] copy_splice_read+0x471/0x6c0 [ 554.371633][T32298] splice_direct_to_actor+0x28f/0x670 [ 554.377044][T32298] do_splice_direct+0x119/0x1a0 [ 554.381943][T32298] do_sendfile+0x382/0x650 [ 554.386407][T32298] __x64_sys_sendfile64+0x105/0x150 [ 554.391645][T32298] x64_sys_call+0x2dc4/0x3020 [ 554.396364][T32298] do_syscall_64+0x12c/0x370 [ 554.400997][T32298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.406948][T32298] [ 554.409301][T32298] value changed: 0x000000000000016b -> 0x000000000000016c [ 554.416435][T32298] [ 554.418790][T32298] Reported by Kernel Concurrency Sanitizer on: [ 554.424984][T32298] CPU: 0 UID: 0 PID: 32298 Comm: syz.9.8998 Tainted: G W syzkaller #0 PREEMPT(full) [ 554.435985][T32298] Tainted: [W]=WARN [ 554.439815][T32298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.449925][T32298] ================================================================== [ 554.557791][T29444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.